CORAA

AI Tool Vendor Due Diligence Questionnaire (Word)

Ask an AI vendor about data use, location, retention, security, changes, breach and contract terms.

Free · CORAA original — SA-aligned
Updated 17 Oct 2026
Asks
Data use and location
Needs
Documents, not promises
Ends in
Approve or reject
Format
Editable Word
Share this template
Your firm — letterhead
Appears at the top of the document as the audit firm letterhead.
Used as the letterhead block.
Engagement details
The client and period this document is for.
What’s inside

An excerpt from the template.

AI Tool Vendor Due Diligence Questionnaire — ___

Scope / period: ___ | Prepared by: ___ | Reviewed by: ___ | Date: ___

Send to the vendor and file the replies with the approval record. Ask for documents, not just assurances, and check current data protection law and client contract terms.

Decision: approve / approve with conditions / reject. Conditions and owner: ____________.

↑ Excerpt only — the full template is what you download as Word
About this template

What you’re downloading, and when to use it.

This template follows the format published by the Institute of Chartered Accountants of India (ICAI) in the AASB Audit Working Paper Templates (June 2023), the authoritative reference for Indian statutory-audit documentation. Fill in your firm’s letterhead and the engagement details on the form above, click Download Word file, and you’ll get a fully formatted .docx ready to use.

Everything is generated in your browser and on a stateless API endpoint — no account, nothing stored on our servers. We’ll ask for a work email once before your first download so we can send you the file and the occasional relevant update; after that, downloads on this device are instant. Edit freely in Word, Google Docs or Pages before sending to your client.

Common questions

FAQs.

What is the most important question for an AI vendor?
Whether client data is used to train models and whether that can be disabled in writing. Also ask where data is stored and how it is deleted.
Related templates

You might also need.

AI Model Risk Assessment for Audit Use
Generate an AI model risk assessment for audit use covering data, accuracy, bias, explainability, human review
Third-Party / Outsourcing Risk Audit Checklist
Free third-party and outsourcing risk internal audit checklist. Vendor risk tiering, SLA monitoring, sub-outso
Data Privacy (DPDP Act 2023) Compliance Audit Checklist
Free DPDP Act 2023 compliance audit checklist. Tests consent management, data fiduciary obligations, breach no