vendor-ai-review

To review vendor AI contract terms for UK GDPR compliance, the skill performs a term-by-term comparison of AI addenda and ToS provisions against your configured UK AI governance playbook, identifying mismatches in training, retention, liability, and human oversight. It outputs severity-rated findings and recommended redlines.

A DPA-to-AI addendum gap assessment is a check that flags when a UK GDPR Data Processing Agreement exists but lacks AI-specific provisions. You need this gap assessment when deploying vendor AI to ensure existing DPAs cover AI behavior, training on data, and model change notices.

To check international data transfer mechanisms for non-UK AI vendors, the skill verifies that data transfers outside the UK have an appropriate UK GDPR Chapter V mechanism, such as adequacy, UK IDTA, or a UK addendum to SCCs, ensuring compliant cross-border AI deployments.

Yes, this vendor AI review tool performs an AI policy consistency comparison by diffing vendor terms against your configured AI policy commitments. It highlights mismatches in use restrictions, auditability, and incident notification, providing actionable escalation routing for items outside fallback positions.

Before deploying AI tools, you should check vendor AI terms covering training on data, confidentiality of inputs, output IP, liability, incident notification, human review rights, data residency, and termination. The skill systematically reviews these provisions against your governance positions to surface deployment risks.

Yes, you can use this skill if you only have AI terms of service. The skill applies when users provide or reference ToS sections covering AI behavior, training, retention, liability, and human oversight, performing a full governance check without requiring a complete main agreement.