- Mapping AI exposure across the software estate
- Reviewing a vendor before renewal after they’ve added AI features
- Evaluating new vendors on AI transparency
- Reporting exposure to a board or risk committee
- AI vendor identification and use case mapping
- Vendor evidence collection with gap analysis and audit trail
- Recommended action per vendor — accept, request evidence, restrict or escalate — and executive reporting