Vendor Application | Verified, Assessed & Certified | AIGAS

AIGAS Vendor Transparency Programme

Make your AI disclosures
clear. Comparable.
Credible.

Q: Can I apply to become Certified now?

You can register interest and provide disclosures and evidence. Formal certification is currently under design; this is a readiness submission, not an award. AIGAS will confirm criteria, availability and any fees.

Give UK accounting firms the answers they need. Apply for a Verified listing, request an Assessed review, or register your interest in becoming Certified.

Start your application Explore the programme

More than a directory entry

Start with transparency.
Build towards Certified.

Turn the questions in a firm’s due-diligence process into one clear account of how your product uses AI.

Be easier to evaluate

Make your AI use, data practices and controls easier for accounting firms to understand.

Show the evidence

Move beyond statements of intent. Request an Assessed review of the controls behind your disclosures.

Prepare for Certified

Organise your evidence now and tell AIGAS you want to be considered when the certification pathway is available.

Transparency, not endorsement. Verified means the vendor has completed and signed off its disclosures. Assessed involves AIGAS review of disclosures and evidence. Certified is currently under design; criteria, availability, fees and any award must be confirmed by AIGAS. No status is a guarantee of product safety or suitability.

Choose your routeGetting started

Choose your route

Only see the questions relevant to your application. You can change your route before you submit.

Which status would you like to work towards?

VerifiedThe simplest starting point. Nine transparency questions, your contact details and vendor sign-off. No evidence pack required.Assessed Request a reviewThe same nine answers, plus grouped controls and evidence. AIGAS will confirm review availability and scope.Certified Register interestShare your disclosures and evidence to prepare for the future certification pathway. Submitting does not award certification.

Already Listed? You do not need to start again. Use your existing vendor and product names so we can match your application to your listing.

Your controls & evidence

The detailed questionnaire, grouped by topic. Build on your nine answers rather than repeating them. For each topic, explain the controls and gaps, reference the evidence, and tell us what can be shared.

Keep sensitive evidence out of this form. Provide public links or document references only. For restricted reports, say “Available under NDA” or “Secure sharing needed”. Do not paste client data, credentials, access tokens or confidential report contents. AIGAS can arrange the next step.

Open each topic to complete it. “Not applicable” needs a reason. A gap or planned control should be described honestly, not marked as implemented.

AI features & product designTo complete

Your controls and any gapsBuild on your AI-use answer. Cover default-on versus opt-in features, visible AI labelling, and planned AI features over the next 12 months.

Evidence references or linksFeature inventory or model/system cards; screenshots of labels and default settings. Use document title, version/date and clause/page references. For confidential material, name the document and write “Available under NDA” or “Secure sharing needed”.

Evidence availability

Models, providers & supply chainTo complete

Your controls and any gapsMap features to model versions and hosts. Describe public sub-processor disclosures and change notices, RAG, fine-tuning or tool-calling, and provider data-use terms with clause references.

Evidence references or linksSub-processor list and data-flow diagram; model/system cards; relevant contractual extracts. Use document title, version/date and clause/page references. For confidential material, name the document and write “Available under NDA” or “Secure sharing needed”.

Evidence availability

Client confidentiality & data useTo complete

Your controls and any gapsExplain training exclusions or permissions for each provider; secondary uses such as evaluation or analytics; tenant segregation; and any cross-client data leakage, with dates and remediation or a nil return.

Evidence references or linksProvider data-use clauses; segregation controls; redacted incident record or nil-return statement. Use document title, version/date and clause/page references. For confidential material, name the document and write “Available under NDA” or “Secure sharing needed”.

Evidence availability

Firm controls & permissionsTo complete

Your controls and any gapsExplain firm, user, role and client-level restrictions; who can change settings; logged/exportable changes; non-AI operation; and exclusion of sensitive files or matters.

Evidence references or linksScreenshots of controls and roles; human-oversight design; sample redacted settings logs. Use document title, version/date and clause/page references. For confidential material, name the document and write “Available under NDA” or “Secure sharing needed”.

Evidence availability

Human oversight & output qualityTo complete

Your controls and any gapsExplain enforced versus configurable review, defaults and exceptions; confidence or uncertainty flags; hallucination, bias and error controls; internal audit frequency; and latest accuracy metrics, including how measured.

Evidence references or linksOversight design; evaluation metrics or dashboard export; review and quality-assurance records. Use document title, version/date and clause/page references. For confidential material, name the document and write “Available under NDA” or “Secure sharing needed”.

Evidence availability

Data lifecycle & securityTo complete

Your controls and any gapsList storage and processing regions for inputs, prompts, outputs, embeddings and logs; cross-border transfers and safeguards; retention and deletion options; encryption and key management; and data return/destruction at termination.

Evidence references or linksResidency/retention policy; data-flow diagram; encryption documentation; contractual deletion provisions. Use document title, version/date and clause/page references. For confidential material, name the document and write “Available under NDA” or “Secure sharing needed”.

Evidence availability

AI policy, accountability & riskTo complete

Your controls and any gapsGive your policy review date and cadence; named accountable executive or governance committee; any framework alignment and its actual status; AI risk assessments/DPIAs; and advance notice of behaviour-changing model updates.

Evidence references or linksPublic AI policy; redacted governance charter/minutes; risk assessment or DPIA; model-change process. Use document title, version/date and clause/page references. For confidential material, name the document and write “Available under NDA” or “Secure sharing needed”.

Evidence availability

Cyber assurance & testingTo complete

Your controls and any gapsFor each credential held, give holder, scope, issuer/auditor, issue/report date, expiry and exceptions. Cover ISO/IEC 27001 and its Statement of Applicability; SOC 2; Cyber Essentials; ISO/IEC 27701; ISO/IEC 42001; AI DPIA date/reviewer; AI-specific pen-test/red-team frequency; and availability of current reports under NDA. State clearly what is not held.

Evidence references or linksApplicable certificates; Statement of Applicability; latest SOC report; AI DPIA; pen-test and red-team summaries. Restricted reports may follow under NDA. Use document title, version/date and clause/page references. For confidential material, name the document and write “Available under NDA” or “Secure sharing needed”.

Evidence availability

Incident response & notificationTo complete

Your controls and any gapsGive the contractual notification timeframe, trigger and channels; explain your AI-specific response playbook; and summarise AI-related incidents in the last 24 months with dates, impact and remediation, or a nil return.

Evidence references or linksAI incident-response playbook; notification clauses; redacted incident log or nil-return statement. Use document title, version/date and clause/page references. For confidential material, name the document and write “Available under NDA” or “Secure sharing needed”.

Evidence availability

Legal terms & professional obligationsTo complete

Your controls and any gapsExplain how the product supports firms’ data protection, relevant payment-card and anti-money-laundering obligations, professional judgement and confidentiality. State output IP ownership, AI-related indemnities and liability limits, citing contractual clauses. Do not include legal advice or an unsupported compliance guarantee.

Evidence references or linksStandard terms; AI/IP clauses; indemnity and liability provisions; relevant policy extracts. Use document title, version/date and clause/page references. For confidential material, name the document and write “Available under NDA” or “Secure sharing needed”.

Evidence availability

Explainability & audit trailsTo complete

Your controls and any gapsDescribe exportable interaction records (prompt, output, user, time, client/period); explanations usable by non-technical reviewers; log retention and tamper evidence; and any regulator-ready evidence export.

Evidence references or linksRedacted sample audit-log export; explanation examples; retention and integrity controls; evidence-pack example. Use document title, version/date and clause/page references. For confidential material, name the document and write “Available under NDA” or “Secure sharing needed”.

Evidence availability

Commercial terms, continuity & changeTo complete

Your controls and any gapsExplain separate AI pricing or opt-out savings; material-change notice periods; provider withdrawal/deprecation contingencies; sandbox/testing availability; and training, documentation and adoption support.

Evidence references or linksAI pricing/terms; change-notification process; model-provider continuity plan; sandbox and training documentation. Use document title, version/date and clause/page references. For confidential material, name the document and write “Available under NDA” or “Secure sharing needed”.

Evidence availability

Draft files contain your answers. Keep them secure on your own device.

Before you apply

A clear route. No surprises.

What is the difference between Listed and Verified?

Listed profiles use public information and may not involve contact with the vendor. Verified means the vendor has completed and signed off the transparency questionnaire. It is a vendor disclosure, not an independent product assessment.

What do I need for a Verified application?

Your vendor and product names, website, contact details, answers to the nine disclosure questions and an authorised sign-off. You do not need to complete the evidence sections.

What does an Assessed review involve?

AIGAS reviews the disclosures and examines supporting evidence. This form groups the detailed questions into topics so you can reference a document once for each relevant topic. AIGAS will confirm availability, scope and any further requirements before a review proceeds.

Can I apply to become Certified now?

You can register interest and provide your disclosures and evidence using the Certified route. Formal certification is currently under design. This is a readiness submission, not a certification award or a promise of acceptance. AIGAS will confirm criteria, availability and any fees.

Do I need to upload confidential documents?

No. Use public links or document titles, dates and clause references. If a document needs an NDA or a secure transfer, say so. Do not provide client data or restricted report contents in this form.

Does a status mean a product is safe for every firm?

No. The programme is a transparency framework, not a safety guarantee or product endorsement. Each firm remains responsible for deciding whether a product meets its needs.

What happens after I submit?

Your application is recorded and the form reports whether a confirmation email was queued. AIGAS then checks the submission, asks for any clarification and confirms the next step. A submission does not change your directory status automatically.

Need help choosing a route? Email [email protected] with your product name and what you want to work towards.

Make your AI disclosures
clear. Comparable.
Credible.

Start with transparency.
Build towards Certified.

Be easier to evaluate

Show the evidence

Prepare for Certified

Choose your route

Your vendor & product

Your nine AI disclosures

Your controls & evidence

Review & sign off

Thank you. Your information is with AIGAS.

Build towards Certified

A clear route. No surprises.

Make your AI disclosuresclear. Comparable.Credible.

Start with transparency.Build towards Certified.

Be easier to evaluate

Show the evidence

Prepare for Certified

Choose your route

Your vendor & product

Your nine AI disclosures

Your controls & evidence

Review & sign off

Thank you. Your information is with AIGAS.

Build towards Certified

A clear route. No surprises.

Make your AI disclosures
clear. Comparable.
Credible.

Start with transparency.
Build towards Certified.