A.10.2 Allocating responsibilities
Allocating responsibilities across the AI system life cycle between the organization, its partners, suppliers, customers and other third parties, and recording the split in contracts and RACI charts.
A.10 Third-party and customer relationships
The three Annex A controls for AI across organizational boundaries: allocating life cycle responsibilities, managing suppliers of AI products and services, and meeting customer expectations.
A.10.3 Suppliers
A process to make sure services, products and materials from suppliers, such as models, datasets and AI platforms, fit the organization's approach to responsible AI: due diligence, contract terms and ongoing monitoring.
A.10.4 Customers
Making sure the organization's responsible approach to developing and using AI takes customer expectations and needs into account: requirements capture, contractual commitments and feedback loops.
