Use this AI vendor addendum when a vendor may process customer data through generative AI, machine learning, automated decisioning, or AI-assisted support workflows.
Attach it to an MSA, order form, DPA, or vendor services agreement to make AI-specific controls explicit without rewriting the full commercial agreement.
What is inside
AI system scope
No model training without approval
Customer data and output ownership
Human review and prohibited uses
Subprocessors and data location
Logging, audit, and incident notice
Security review rights
These resources are starting points, not legal advice. Review every template and recommendation against your facts, policies, and applicable law before use.