An inventory documenting the components, dependencies, and provenance of an AI system, analogous to an SBOM for software. An AIBOM typically covers the model(s) in an AI system and their versions, fine-tuning datasets, adapters, system prompts, guardrails, embedding models, vector databases, tools and plugins, and third-party services—the full CORE of the deployed system. AIBOMs support license compliance, supply chain security, incident response, and regulatory documentation requirements. They are increasingly requested in enterprise procurement and expected for high-risk AI systems.
See: AI system; CORE; License compliance; Model card; Supply chain security