Free Tool

AI vendor test
boundary checklist

Name a vendor, get the exact questions to send them about test environment isolation and stop authority, the ones almost no vendor questionnaire asks. Free, personalized to your vendor.

Which AI vendor are you checking?What does their system actually do? (select all that apply)

Chatbot or copilot embedded in a productTalks to your customers or staff directlyAn agent that takes real actionsSends emails, moves money, writes code, makes purchases, without a human clicking each oneAPI access to a foundation modelYou build on top of a model you don't host or controlHandles regulated or sensitive dataPersonal data, financial data, health data, or anything under a specific legal regime

This gives you the questions. It won't prove what a vendor answered.

A boundary authorization record seals who approved a vendor, what was agreed, and when it stops being current, independently timestamped so the approval itself is provable later, not just remembered.

See how a boundary record works

This tool gives general guidance, not legal or security advice. Use it as a starting point for your own vendor risk process, not a substitute for one.

AI vendor testboundary checklist

AI vendor test
boundary checklist