Procurement workflow surface
OMB Memorandum M-24-10 (Advancing Governance, Innovation, and Risk Management for Agency Use of AI) — vendor disclosure form
This is a sample disclosure form a procurement team can adapt for vendor RFPs and ITTs evaluating systems against OMB Memorandum M-24-10 (Advancing Governance, Innovation, and Risk Management for Agency Use of AI). The provision-specific questions below were derived from the catalog's coverage cells; before issuing, a qualified procurement lawyer should review the adapted version against your jurisdiction's contract law. This form is NOT legal advice (see charter §7.4).
1. Vendor identification
2. AI system identification
3. Provision-specific questions
- Compute-Threshold Reporting. Does the offered system meet the compute / training-cost reporting thresholds named in OMB Memorandum M-24-10 (Advancing Governance, Innovation, and Risk Management for Agency Use of AI) (§3(a)(iv)–(v) annual public AI use-case inventory + quarterly AI procurement reporting to OMB)? If yes, attach the most recent submitted report (redacted as needed) or confirm submission status.
(Cite: §3(a)(iv)–(v) annual public AI use-case inventory + quarterly AI procurement reporting to OMB)
- Transparency Obligations. Provide the documentation required under the transparency obligations of OMB Memorandum M-24-10 (Advancing Governance, Innovation, and Risk Management for Agency Use of AI) (§3(a)(iv) public AI use-case inventory; Attachment 1 §5(c)(v) plain-language public notice + explanation for rights-impacting AI) — including (as applicable) model card, system card, training-data summary, evaluation results, and known limitations.
(Cite: §3(a)(iv) public AI use-case inventory; Attachment 1 §5(c)(v) plain-language public notice + explanation for rights-impacting AI)
- Individual Redress. Describe the end-user redress + complaint channel offered for the system, including documented appeal path and response-time commitment, consistent with OMB Memorandum M-24-10 (Advancing Governance, Innovation, and Risk Management for Agency Use of AI) (Attachment 1 §5(c)(v)(D) human consideration + remedy for rights-impacting AI; opt-out where practicable).
(Cite: Attachment 1 §5(c)(v)(D) human consideration + remedy for rights-impacting AI; opt-out where practicable)
4. Documentation enclosures expected
Tick each enclosure attached to the vendor response. Missing enclosures should be explained in the “Variances” field below.
- Safety / capability evaluation results
- Copies of submitted regulatory reports / registrations
- Vendor company registration + insurance certificates
- Sub-processor / supply-chain list (including model upstream)
5. Vendor attestation
The undersigned, on behalf of the vendor, attests that the disclosures above are true and complete to the best of their knowledge at the date signed, and undertakes to notify the buyer in writing within 30 days of any material change to those disclosures.
This is a sample form derived from the catalog at /wiki/omb-m-24-10. Adapt before issuing. Not legal advice; not jurisdiction-specific. See charter §7.4.