Supplier AI Assessment Standard 

OVERVIEW

AIMM seeks to utilise technology and information sources that support the responsible delivery of its Commercial Intelligence Services.

Where AIMM considers it appropriate, prospective AI suppliers, software providers, information vendors and other technology providers may be assessed using a risk-based evaluation process determined by AIMM.

The scope and extent of any assessment remain at AIMM's sole discretion and may vary according to the nature of the supplier, the services provided and the perceived level of operational risk.

OBJECTIVES

This Standard is intended to support:

• responsible procurement of AI-enabled technologies;

• protection of confidential information;

• appropriate governance of third-party AI services;

• information security;

• operational resilience;

• regulatory compliance;

• responsible use of Commercial Intelligence;

• ongoing supplier governance.

SCOPE

This Standard may apply, where appropriate, to:

• Artificial Intelligence platforms;

• machine learning services;

• cloud-based AI providers;

• software suppliers;

• data and information vendors;

• analytical tool providers;

• workflow automation platforms;

• technology consultants;

• other suppliers whose products or services incorporate AI functionality.

Application of this Standard to any supplier remains at AIMM's discretion.

RISK-BASED ASSESSMENT PRINCIPLES

AIMM may consider factors including:

Business Suitability

Whether the supplier's products or services are considered suitable for AIMM's operational requirements.

Information Governance

Whether the supplier demonstrates an approach to handling information that AIMM considers appropriate for the intended use.

Security Considerations

Whether the supplier appears to maintain security practices that AIMM considers appropriate for the proposed use.

AIMM does not certify or guarantee the security of any third-party supplier.

AI Governance

Whether the supplier appears to maintain appropriate governance over the development, deployment and operation of AI technologies.

Legal & Regulatory Considerations

Whether the supplier appears capable of supporting AIMM's legal, contractual and regulatory obligations relevant to the proposed use.

Operational Reliability

Whether the supplier appears capable of supporting AIMM's operational requirements, recognising that no supplier can guarantee uninterrupted service or error-free performance.

Commercial Considerations

Where appropriate, AIMM may also consider:

• commercial viability;

• contractual terms;

• licensing arrangements;

• intellectual property considerations;

• business continuity.

ASSESSMENT PROCESS

Where AIMM considers an assessment appropriate, it may include one or more of the following activities:

• review of publicly available information;

• review of supplier documentation;

• technical evaluation;

• commercial evaluation;

• governance review;

• legal review;

• security review;

• operational assessment;

• internal approval.

The methodology applied will depend upon the particular supplier and AIMM's operational requirements.

ONGOING REVIEW

Supplier relationships may be reviewed periodically or where AIMM considers that circumstances warrant further assessment.

Such circumstances may include:

• material changes to the supplier's services;

• changes in legal or regulatory requirements;

• significant security incidents;

• operational concerns;

• changes in AIMM's business requirements.

AIMM reserves the right to continue, suspend or discontinue the use of any supplier at its sole discretion.

NO CERTIFICATION OR ENDORSEMENT

An assessment conducted by AIMM does not constitute:

• certification;

• accreditation;

• endorsement;

• approval for use by third parties;

• a representation that the supplier complies with any particular legal, regulatory or industry standard.

Any assessment is undertaken solely for AIMM's internal governance purposes.

THIRD-PARTY SERVICES

Third-party suppliers operate independently of AIMM.

AIMM does not control the systems, personnel, technologies or business operations of third-party suppliers and accepts no responsibility for their acts, omissions, products or services except to the extent required by applicable law or expressly agreed in applicable contractual documentation.

CONFIDENTIALITY

Information obtained during supplier assessments may be treated as confidential by AIMM where appropriate.

AIMM may decline to disclose the outcome of any supplier assessment or the basis upon which operational decisions are made.

CONTINUOUS IMPROVEMENT

Supplier assessment practices may be reviewed, modified or replaced by AIMM from time to time to reflect:

• technological developments;

• operational experience;

• recognised governance practices;

• legal and regulatory developments;

• business requirements.

RELATIONSHIP WITH OTHER POLICIES

This Supplier AI Assessment Standard should be read together with:

• AI Governance Framework

• Information Security Policy

• Data Retention Policy

• Privacy Policy

• Compliance

• Commercial Intelligence Framework

• Terms of Business

• Acceptable Use Policy

IMPORTANT NOTICE

This Supplier AI Assessment Standard provides a general description of AIMM's internal governance approach to the assessment of AI-enabled suppliers and technology providers.

It is provided for general information only and does not create any contractual obligation, warranty, certification or representation regarding any supplier, technology, product or service.

Nothing in this Standard requires AIMM to engage, assess, approve, retain or continue using any particular supplier or technology. Decisions regarding supplier selection, assessment, engagement and continued use remain entirely at AIMM's discretion.