The AI questions your clients will ask you,
and where the answers are.
Public bodies and large companies now send their suppliers questions about the AI they use. These are taken from the forms real buyers publish, put in plain words. Every Ops Intel AI compliance framework includes this list, with each question answered from your own documents.
What they ask, and what answers it.
-
Do you use AI in the work you would do for us? If so, how?
Asked by: UK government buyers, Universities and colleges, Large company buyers
Answered in our frameworks by: AI Tool Inventory, AI Risk Register, EU AI Act Risk Tier Classification, GDPR Compliance Position.
Still yours to do: Keep your list of AI tools current, and send the rows that touch the client's work.
-
Did you use AI to write this proposal, and did a person check it for accuracy?
Asked by: UK government buyers
Answered in our frameworks by: AI Acceptable Use Policy, Employee AI Guidelines — Practical Dos and Don'ts.
Still yours to do: Record who checked any proposal written with AI before it was sent.
-
Will our information go into an AI tool, or be used to train one?
Asked by: UK government buyers, Universities and colleges
Answered in our frameworks by: AI Acceptable Use Policy, Data Classification Matrix, AI Supply Chain Risk Review, Data Governance Documentation for AI Systems.
Still yours to do: Check that each AI tool's terms say it does not train on what you put in, and keep a copy.
-
Who in your business is responsible for how you use AI?
Asked by: Large company buyers
Answered in our frameworks by: AI Acceptable Use Policy, Human Oversight Procedures, AI Risk Register, AI Tool Inventory.
Still yours to do: Name one person, and give that name when you are asked.
-
Have you assessed the risks of your AI use, including mistakes, bias and security?
Asked by: Large company buyers, Universities and colleges
Answered in our frameworks by: AI Risk Register, AI Impact Assessment Template, Fundamental Rights Impact Assessment (FRIA), EU AI Act Risk Tier Classification.
Still yours to do: Review the risks once a year, and record that you did.
-
What happens if your AI goes wrong, and will you tell us?
Asked by: Large company buyers
Answered in our frameworks by: AI Incident Response Procedure.
Still yours to do: Write down who you would tell, how quickly, and how you would switch the tool off.
-
Do you tell people when they are dealing with AI?
Asked by: Universities and colleges, Large company buyers
Answered in our frameworks by: Article 50 Transparency Assessment and Disclosures, Consumer-Facing AI Transparency Disclosures, Employment AI Disclosure Notices, Automated Decision-Making Notices and Opt-Out Procedures, AI Acceptable Use Policy.
Still yours to do: Use the same wording everywhere you tell people about AI.
-
Does a person check what the AI produces or decides?
Asked by: Large company buyers, Universities and colleges
Answered in our frameworks by: Human Oversight Procedures, Where a Person Must Look, AI Acceptable Use Policy.
Still yours to do: Make sure a named person checks at each point your documents list.
-
Can you confirm you do not use AI in ways the law bans?
Asked by: Large company buyers
Answered in our frameworks by: Prohibited AI Use Register, Banned AI Practices Declaration.
Still yours to do: Confirm in writing that you use AI for none of the practices the EU AI Act prohibits. Larger clients ask even where that Act does not reach you.
-
Do you keep watch on your AI, and keep a record of its failures?
Asked by: Large company buyers
Answered in our frameworks by: Monitoring and Logging Procedures, AI Test Cases — What to Check Before You Trust It.
Still yours to do: Keep a simple log of every error or complaint about an AI tool, and what you did about it.
-
Do you have a written policy for how you use AI?
Asked by: Universities and colleges, Large company buyers
Answered in our frameworks by: AI Acceptable Use Policy, AI Literacy Policy.
Still yours to do: Sign and date the policy, and send it when you are asked.
Which of those documents you hold depends on the framework you choose. Every framework carries the full list of questions, and says plainly where your own pack answers each one and where the next step is yours.
Read at the source.
- Procurement Policy Note 017: Improving Transparency of AI use in Procurement (UK government buyers)
- Jisc: AI Procurement Due Diligence (Universities and colleges)
- Microsoft Supplier Data Protection Requirements, Section K: AI Systems (Large company buyers)
Seen a question that is not here? Send it to hello@opsintel.io, with the client's name removed, and we will add it.