Glossary
Updated
The AIBOM extends SBOM concepts into the AI supply chain. It records the foundation model used, the fine-tuning datasets, the inference dependencies, the third-party APIs invoked, and the open-source components included. Emerging as a procurement diligence requirement, the AIBOM lets organizations assess inherited data risk, license compliance, and supply chain vulnerabilities at a level of detail that vendor-supplied marketing material rarely provides.
Example
A bank requires every third-party AI vendor to provide an AIBOM listing all foundation models, surfacing that a sentiment analysis tool actually relies on a model trained partly on copyrighted news content.