GovernanceCore
Operations

AI inventory

Working definition

Reviewed 30 July 2026

An AI inventory is an authoritative, maintained record of the AI systems and material AI use cases an organization develops, procures, or operates. A useful inventory connects each entry to ownership, purpose, lifecycle state, affected stakeholders, third parties, data, risk tier, controls, and evidence.

Context

Why it matters

An organization cannot govern systems it cannot see. The inventory is the operational spine for scoping reviews, monitoring obligations, incidents, vendors, and regulatory reporting.

Operating note

What this looks like in practice

  1. 01Give every system a stable identifier and named business owner.
  2. 02Cover embedded and vendor AI, not only models built by data-science teams.
  3. 03Require updates at approval, material change, incident, and retirement.

Sources & further research

Primary authority anchors the definition. Research links add conceptual or operational depth. External sources may update independently; always verify legal duties against the current official text.

  1. Official source

    AI RMF Playbook — Map

    Operational guidance for documenting contexts, components, actors, impacts, and lifecycle information.

    NIST AI Resource Center
    2023
    Open source ↗
  2. Standard

    ISO/IEC 42001:2023 — AI management systems

    Establishes a management-system basis for controlled information, scope, roles, and continual improvement.

    ISO
    2023
    Open source ↗