AI Vendor Passport · For AI vendors selling to banks, credit unions, insurers, hospitals and health systems
Answer your buyer's AI review once, properly.
When a regulated buyer sends a security and AI questionnaire about your product, we help you answer it from your own documents. Every draft answer points to the document it rests on, and the questions your documents cannot yet support are written down plainly.
The problem
A security report answers part of the review. The AI questions are the rest.
Regulated buyers ask what your AI does, where their data goes, whether it is used for training, how you test the system, and who can override it. The answers sit across security, product, legal and engineering, and often are not written down.
So each review becomes a scramble, and answers that are not backed by a document come back as follow-up rounds.
What you get
For one live review of one AI product.
Draft answers linked to evidence
One draft answer per question, each pointing to the document and section it rests on, and marked as answered from evidence, partly supported, or not supported by your current documents.
A gap register
Every question your documents cannot support, why, and what document or control would close it. We do not write answers your documents do not back.
A list of the documents used
So you, and your buyer's reviewer, can see exactly what each answer was based on.
A handover session
One 60-minute call to walk through the answers and the gaps before you submit.
How it works
Your documents in. Traced answers out.
- 01
You send the questionnaire and your documents
One buyer questionnaire and one AI product. Send the documents you already have: security report, policies, system description, subprocessor list, past answers. Remove the buyer's name if you prefer.
- 02
We draft and trace every answer
We read your documents, draft each answer and link it to its source. A person reviews every answer before it reaches you.
- 03
We hand it over. You submit.
We walk you through the answers and gaps in one session. You submit to your buyer in the format they asked for. We do not submit anything to your buyer.
What is not included
Clear limits, so your buyer knows what they are reading.
No testing of your AI system
We read documents. We do not run accuracy, bias or security tests. If a question asks for test results you do not have, it goes in the gap register.
No remediation
We say what is missing. We do not write your policies or build your controls.
No certification
ARBS is not an auditor or assessor. The output is not a certification and carries no third-party sign-off.
No legal advice
Where we explain why a question is asked, it is for context. Your counsel owns the interpretation.
How to start
Start with the free scorecard.
14 questions, about 3 minutes, no sign-up. It shows which parts of a buyer's review are likely to stall and which document closes each gap. If you are facing a review now, tell us about it below.
AI Vendor Passport
Tell us about the review you are facing.
Who is reviewing you, and when it is due. Leave out the buyer's name if you prefer.