AI Bill of Materials (AIBOM)
A structured manifest of the components that produced an AI system: base model, fine-tuning datasets, RAG sources, tools invoked, guardrails, and licence terms for each. Analogous to a software SBOM (SPDX or CycloneDX). Increasingly requested by procurement, security review, and EU AI Act conformity assessments in 2026.
Last reviewed:
Related terms
- Model Card
A short document describing a model's intended use, training data, evaluation results, known limitations, and ethical considerations. Introduced by Google in 2018 and increasingly required by AI governance regimes (NIST AI RMF, ISO 42001, EU AI Act technical documentation).
- Data Card
A structured document describing a dataset's provenance, composition, collection methodology, licensing, known biases, and appropriate uses. Companion to Model Cards; increasingly required as evidence for training-data lineage under the EU AI Act.
- EU AI Act
European Union regulation (effective 2024, phased through 2027) that classifies AI systems into risk tiers — unacceptable (banned), high-risk (conformity assessment required), limited-risk (transparency obligations), and minimal — and imposes proportionate obligations. Applies extraterritorially to any provider placing AI on the EU market.
- AI Governance
The framework of policies, procedures, and controls that guide the development, deployment, and use of AI systems within an organization. Ensures AI aligns with organizational values and regulations.
Related on this site
Where this fits
AI Bill of Materials (AIBOM) is part of the Ethics & Governance vocabulary used in the Generative AI Maturity Framework. See the full glossary for the complete set of 159 defined terms, or take the free maturity assessment to see where your organisation stands.