FREE REFERENCE
The AI questionnaire answer library.
The CAIQ and SIG Lite now carry an AI governance module. These are the questions enterprise buyers actually send, with a model answer for each, the evidence a reviewer expects behind it, and the reason weak answers fail. Free, no sign-up. Written by regulatory practitioners.
A model answer is not a substitute for the underlying governance. A reviewer who spot-checks an answer and finds nothing behind it will distrust every other answer you gave. Use these to see what "good" looks like — then build the evidence that makes them true.
CERTIFICATION & FRAMEWORKS
Question
Are you certified to ISO/IEC 42001, or do you have a documented roadmap to certification?
The credible answer whether you hold the certificate or are running an aligned AIMS today.
Read the model answer →
QuestionDo you align with the NIST AI Risk Management Framework?
Why "aligned" beats "compliant" — and the four functions your records should map to.
Read the model answer →
QuestionHas your AI system been classified under the EU AI Act, and what obligations apply?
The classification, the reasoning behind it, and the obligations that follow — as reviewers actually test them.
Read the model answer →
DATA & MODEL PROVENANCE
Question
Describe the provenance of your training data and the rights under which it is used.
The data-governance answer buyers read next to your privacy policy and contract — and how to keep all three consistent.
Read the model answer →
QuestionDo you maintain model cards, and do they disclose known limitations?
Why an honest limitations section builds more confidence than a clean sheet nobody believes.
Read the model answer →
OVERSIGHT & CONTROLS
Question
Where does human oversight sit in your AI system, and who holds it?
The named role, the intervention point, and the evidence that the reviewer can genuinely decide otherwise.
Read the model answer →
QuestionHow do you test for bias, and what did the testing find?
The method, the cadence, the actual result — including the uncomfortable ones — and what was done about them.
Read the model answer →
SUPPLY CHAIN & INCIDENTS
Question
List your AI sub-processors and describe how you assess them.
Why the foundation-model provider counts — and how to assess, not merely name, your AI supply chain.
Read the model answer →
QuestionWhat happens when your AI system behaves incorrectly or causes harm?
The runbook, the severity criteria, the notification clocks — and why the honest one-pager beats confident silence.
Read the model answer →
Free readiness check
See which sections you would fail today.
Free, no sign-up to see your result.