VNDRIQVendor Risk Registry

Onboarding

AI Vendor Onboarding Checklist

A structured checklist for onboarding an approved AI vendor from contract signature through go-live, covering security, privacy, legal, integration, and training.

Editorially reviewed: 2026-07-18

Pre-go-live reviews

Complete security review, privacy review, legal and BAA execution, responsible AI review, integration requirements, user-access provisioning, and training before final go-live approval.

Data-access classification

Document the data classification (no PHI, demographics, clinical, imaging, billing) the vendor will access and confirm controls match that classification.

Go-live gate

A final executive go-live approval confirms all onboarding items are complete and the vendor is ready for production use.

Frequently Asked Questions

Who owns onboarding?

A named internal owner coordinates security, privacy, legal, IT, and business stakeholders through the onboarding workspace.

What if onboarding stalls?

Blocked or awaiting-vendor statuses should be escalated with a target resolution date tracked in the onboarding workspace.