---
title: "AI vendor terms review checklist"
url: "https://ailawframework.com/precedents/technology-media-and-telecommunications-it-contracts/us-ai-vendor-terms-checklist"
type: "precedent"
site: "AI Law Framework"
id: "a24-us-ai-vendor-terms-checklist"
area_id: "A24"
kind: "checklist"
ai_level: "yellow"
version: 1
task_ids: ["A24-B7-1", "A24-B8-1", "A24-T1-R11"]
law_stated_as_at: "2026-10-22"
---

# AI vendor terms review checklist

> Questions for a contract with a vendor that provides or hosts an AI system. The NIST AI Risk Management Framework is voluntary. No statute opened here requires a vendor to adopt it or sets who owns model outputs.

Canonical page: https://ailawframework.com/precedents/technology-media-and-telecommunications-it-contracts/us-ai-vendor-terms-checklist  
Law stated as at: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

- Kind: Checklist. Steps or checks to work through and tick off.
- Practice area: [Technology, Media & Telecommunications / IT Contracts](https://ailawframework.com/precedents/technology-media-and-telecommunications-it-contracts.md)
- Jurisdictions: United States
- AI level: Yellow. You and the tool draft together, with you directing. You check every statement you rely on.
- Law stated as at: 2026-10-22
- Status: Maintained. Checked on 2026-10-22 against the 3 authorities it cites, for United States.

## When to use it

Use when reviewing an AI vendor's terms before signature. Record what the draft says. Do not add a training ban, an output license, or an incident deadline that the draft and the opened sources do not contain.

## Used for these tasks

- [Review a SaaS agreement for AI-specific clauses](https://ailawframework.com/practice/technology-media-and-telecommunications-it-contracts/review-a-saas-agreement-for-ai-specific-clauses.md)
- [Review a GenAI vendor contract for TMT clients](https://ailawframework.com/practice/technology-media-and-telecommunications-it-contracts/review-a-genai-vendor-contract-for-tmt-clients.md)
- [Draft AI-use, training-data and output-warranty clauses for a vendor contract](https://ailawframework.com/practice/technology-media-and-telecommunications-it-contracts/draft-ai-use-training-data-and-output-warranty-clauses-for-a-vendor-cont.md)

## How AI may be used

AI may quote the clauses on training, outputs, testing, and incidents from the draft. The lawyer decides which gaps matter and whether any statute applies.

**AI may:**

- Quote the training, output, testing, and incident clauses from the draft
- Mark a topic the draft does not address as silent, not as forbidden
- Point a Safeguards Rule customer to the safeguards addendum rather than inventing controls

**AI must not:**

- Must not state that the AI RMF is legally required
- Must not invent an ownership rule for outputs or a ban on training
- Must not insert an incident-notice period

**The lawyer checks:**

- Each row is a quotation from the draft or an express 'silent'
- Part 314 is raised only if the lawyer decides the customer is covered
- The checklist is not signed as the contract

## Authorities

- [NIST AI 100-1, Artificial Intelligence Risk Management Framework (AI RMF 1.0) (January 2023), voluntary](https://doi.org/10.6028/NIST.AI.100-1)
- [16 CFR § 314.1(b) (who the Safeguards Rule addresses)](https://www.law.cornell.edu/cfr/text/16/314.1)
- [16 CFR § 314.4(f) (safeguards by contract, only if the customer is covered by part 314)](https://www.law.cornell.edu/cfr/text/16/314.4)

## Full text and drafting notes

The full text and the drafting notes are not part of this public page. Signed-in firm accounts can read them at https://ailawframework.com/precedents/technology-media-and-telecommunications-it-contracts/us-ai-vendor-terms-checklist and through the signed-in MCP connector https://ailawframework.com/mcp/firm.

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*