Control #
D
3
.
1
Maintain a data flow map for AI vendors
Document how data moves to, from, and within AI vendors, including where it is stored and how it is processed. This helps identify risks and regulatory exposure.
Evidence
We'll list specific evidence that demonstrates compliance with this control. Typically, this is screenshots, proof of a legal or operational policy, or product demonstrations.
Recommended actions
We'll recommend specific practices and actions for complying with this control.