Compliance & Regulatory
AI Bill of Materials (AIBOM)
A detailed inventory of all components, data sources, and dependencies within an AI system.
An AI Bill of Materials (AIBOM) is a comprehensive listing of all the components that make up an AI system — analogous to a software bill of materials (SBOM) but specific to AI. For third-party AI tools, an AIBOM might include:
- The underlying model(s) used (GPT-4, Claude, Llama, etc.)
- Training data sources and their provenance
- Third-party APIs or services the tool depends on
- Data processing locations and jurisdictions
- Subprocessors and their roles
- Version history and update cadence
AIBOMs are still an emerging concept, but they're becoming important as supply chain transparency requirements extend to AI systems.
Why it matters
Just as SBOMs revealed hidden software supply chain risks, AIBOMs expose the hidden dependencies in AI tools. A vendor that quietly switches from GPT-4 to a cheaper model changes the risk profile of every customer.