A Bill of Materials for Your AI
You track dependencies in your software supply chain; your AI supply chain needs the same. The AI-BOM inventories every model, agent, and tool with provenance and an approval state you control.
Illustrative product view
What an AI-BOM is
An AI bill of materials (AI-BOM) is the inventory of every AI component your organization uses - models, agents, and tools - each with its provenance and an approval state. It is the AI analogue of a software bill of materials: you cannot secure or govern an AI supply chain you have not inventoried. AgentFence exposes it at GET|POST /api/v2/ai-bom with approve, flag, and block actions and a /ai-bom/provenance view.
What the AI-BOM tracks
| Attribute | What it captures |
|---|---|
| Asset type | Model, agent, or tool |
| Provenance | Origin, vendor, and ownership |
| Approval state | Approved, flagged, or blocked |
| Usage | Where the asset is used |
| Risk | Whether it is vetted or unvetted |
Approve, flag, or block
Governing an AI asset
- 1
Inventory
Discovery and registration add the model, agent, or tool to the AI-BOM.
- 2
Attach provenance
Record where it came from, who owns it, and its vendor.
- 3
Decide
Approve a vetted asset, flag one that needs review, or block an unvetted one.
- 4
Track usage
See where the asset is used so an approval or block has reach.
- 5
Re-review
Revisit approval state as the asset or its risk changes.
How it connects
- Shadow AI discovery feeds newly found tools into the AI-BOM
- The AI asset register is the durable inventory the AI-BOM maintains
- Approval state gates whether an agent or tool may be used
- Provenance supports AI vendor risk assessments
Frequently asked questions
What is an AI-BOM?
An AI bill of materials (AI-BOM) is an inventory of every AI model, agent, and tool an organization uses, each with provenance and an approval state. It is the AI equivalent of a software bill of materials - the record that lets you govern and secure your AI supply chain rather than trusting it blindly.
Why do I need an AI bill of materials?
Because you cannot govern AI you have not inventoried. Without an AI-BOM, unvetted models and tools run unnoticed, and there is no record of what was approved. The AI-BOM gives you a single place to see every AI asset, its provenance, and whether it is approved, flagged, or blocked.
What is AI provenance?
AI provenance is the origin and ownership of an AI asset - where a model or tool came from, which vendor supplies it, and who is accountable for it. The AI-BOM attaches provenance to each asset so you can answer whether a given piece of AI has been vetted.
Can I block an AI model or tool?
Yes. Each AI-BOM asset has an approval state you control - approve a vetted asset, flag one that needs review, or block an unvetted one. Because the inventory tracks where assets are used, a block has real reach rather than being a note on a list.
Stay in the loop
One practical finance briefing a week - new guides, checklists, and benchmarks.
Inventory your AI supply chain
Track every model, agent, and tool with provenance and an approval state.
Talk to us