The AI questionnaire, explained — with citations

Everything here is verified against primary sources (Official Journal, CSA, Shared Assessments) and dated. It's the same knowledge base we answer client questionnaires from.

• EU AI Act Article 50: who actually owes what The provider-vs-deployer trap that ruins half of questionnaire responses, the real dates after the Digital Omnibus, and what non-compliance actually costs an SME.
• How to answer the AI section of a security questionnaire The full method: inventory first, the two-layer training-data answer, surviving "are you AI Act compliant?", and the gap formula procurement accepts.
• The AI-CAIQ: what it is and how to answer it The CSA's AI questionnaire (Oct 2025) is landing on vendors' desks. What buyers look for, the training-data trap, and the small-vendor method.
• SIG 2026 added an AI risk domain What your buyer's third-party risk team now expects, answering the ISO 42001 question without certification, and the MCC-AI clauses coming for your contract.