Last updated:
A structured inventory listing the components that make up an AI system, including foundation models, training datasets, libraries, and dependencies - the AI equivalent of a Software Bill of Materials (SBOM).
The AIBOM extends SBOM concepts into the AI supply chain. It records the foundation model used, the fine-tuning datasets, the inference dependencies, the third-party APIs invoked, and the open-source components included. Emerging as a procurement diligence requirement, the AIBOM lets organizations assess inherited data risk, license compliance, and supply chain vulnerabilities at a level of detail that vendor-supplied marketing material rarely provides.
Real world example:
A bank requires every third-party AI vendor to provide an AIBOM listing all foundation models - surfacing that a sentiment analysis tool actually relies on a model trained partly on copyrighted news content.
