Free Tool

AI Vendor Risk Scorer

Score your AI vendor against 10 key risk factors. Identify where your data exposure lies and whether your current due diligence is sufficient under UK GDPR.

Takes about 3 minutes · No email required · Instant results

Question 1 of 10

Question 1 of 10

Does your vendor have a written Data Processing Agreement (DPA) in place?

Question 2 of 10

Is the vendor's data processing infrastructure located within the UK or EU?

Question 3 of 10

Does the vendor's privacy policy explicitly prohibit training their models on your customer data?

Question 4 of 10

Does the vendor publish a sub-processor list and notify you of changes?

Question 5 of 10

Can your vendor demonstrate compliance with UK GDPR Article 28 requirements?

Question 6 of 10

Does the vendor support your right to data deletion (erasure) on request?

Question 7 of 10

How does the vendor handle a personal data breach affecting your data?

Question 8 of 10

Does the vendor undergo independent security audits (SOC 2, ISO 27001, Cyber Essentials Plus)?

Question 9 of 10

Are there contractual restrictions on the vendor sharing or selling your data to third parties?

Question 10 of 10

Does the vendor provide a clear mechanism for you to export or port your data?

Book a Clarity Session Try Another Tool