Agentic Risk Analyst

What could go wrong with this AI use case, and what should we do about it?

Chirag Dani · ARA v3.2.1
LLM: huggingface · meta-llama/Llama-3.3-70B-Instruct · Secure-RAG: connected

AI vendor due diligence

Check a vendor's contract, terms, security pack and AI documentation against 14 AI vendor controls. Each control gets the cited sentence or "not found", a question for the vendor and a suggested clause; the vendor gets a rule-based rating.

Rating rule: High: two or more critical controls without clear evidence, or one for a material service. Medium: one critical control without clear evidence, or four or more other controls without it. Low: otherwise. Uploaded files are parsed for this check and not kept; the cited sentences are stored with the review.

Reviews

No reviews yet.

Decision support only, not legal or regulatory advice. AI-generated ratings and citations must be reviewed by a qualified person before they are relied on.