Control #
D
3
.
4
Require vendors to disclose geographic scope of AI operations
Ask AI vendors to disclose where their models are hosted and where customer data is processed or stored. Use this to validate compliance with your own geographic or regulatory constraints.
Evidence
We'll list specific evidence that demonstrates compliance with this control. Typically, this is screenshots, proof of a legal or operational policy, or product demonstrations.
Recommended actions
We'll recommend specific practices and actions for complying with this control.