Procurement governance record#
Template ID: tpl-procurement
Version: 1.0.0
Status: educational starter; not legal advice, procurement approval, certification, or a production control.
Related gates: Classify, Assess, Control
Starter controls: ctrl-purpose-boundary, ctrl-third-party-due-diligence, ctrl-data-provenance
Decision context#
- Case ID:
- Business owner:
- Procurement owner:
- Intended purpose and affected stakeholders:
- Prohibited uses:
- Non-AI and in-house alternatives considered:
- Proposed decision: proceed / conditions / hold / redesign / stop
Supplier and dependency record#
| Item | Supplier response | Evidence reference | Reviewer | Status |
|---|---|---|---|---|
| Hosting and processing locations | Open | |||
| Model and material subprocessors | Open | |||
| Training and customer-data use | Open | |||
| Security and incident notification | Open | |||
| Material change notification | Open | |||
| Audit and assurance evidence | Open | |||
| Export, deletion, continuity and exit | Open |
Control conditions#
- Required human authority:
- Data boundaries:
- Technical restrictions:
- Monitoring and indicators:
- Contract conditions:
- Unresolved exceptions and accountable acceptor:
Source status#
List primary sources with publisher, URL, checked date, next review date and status. A source link does not establish applicability or current legal effect.
Approval#
- Decision owner:
- Decision and conditions:
- Evidence gaps:
- Review/reopening triggers:
- Date:
PALO FRAMEWORK