CYRVANA Assessments

Baseline AI Vendor Assessment

This Baseline AI Vendor Assessment is a structured, six-question review that scores any AI vendor on the dimensions that matter most for data protection and governance: where your data is processed, who owns and may use your inputs, how long outputs and logs are retained and who can see them, which subprocessors sit in the supply chain, what admin controls and audit logs you get, and how cleanly you can disable, delete, or exit. The output is a per-vendor score out of 12, an automatic risk rating - Approved, Conditional, Elevated risk, or Do not use. This enables you to perform a quick assessment of your existing or prospective AI vendors.

Question 1 of 617%

Where is our data processed and stored, and in which jurisdictions?

Data residency controls available by default (e.g., US-only, EU-only). Processing locations and regional subprocessors documented publicly.Processing locations disclosed but no customer control over region. Residency may be purchased or negotiated as an add-on.Processing location undisclosed, OR data may be processed in any jurisdiction with no customer control. No data residency commitments.

Select an option to continue