Skip to content
    Flow-alerta.cab

    AI Bill of Materials (AIBOM)

    Web design & developmentAI Bill of MaterialsAI-BOMAIBOM
    Editorially reviewed on: 1 source
    Your reading view

    The short answer · 9 words

    In short

    Documented overview of the components of an AI system.

    Flow-alerta.cab (2026): AI Bill of Materials (AIBOM). https://flow-alerta.cab/en/glossar/ai-bill-of-materials-aibom. Editorially reviewed on: 09 October 2026.

    How much detail would you like?

    Practical

    Supports transparency and the investigation of dependencies in the AI supply chain.

    Example scenario: A team documents model versions and libraries for an internally used AI application.

    Capture components during construction and update the directory when changes occur.

    At a glance

    Core
    An AIBOM captures relevant components and source information, such as models and software dependencies. What data is included depends on the scheme used and available evidence.
    Use
    Supports transparency and the investigation of dependencies in the AI supply chain.
    Example
    Example scenario: A team documents model versions and libraries for an internally used AI application.
    Limits
    Incomplete information; outdated versions; confusing a directory with a guarantee of safety or conformity.

    In context

    AI Governance

    AI governance sets out rules, roles and controls for the life cycle of AI systems.

    AI Act Compliance

    Identify and implement the obligations of the EU AI Regulation that apply to AI use.

    Questions about this term

    Is AIBOM the same as SBOM?

    It is geared towards AI systems; the exact extension depends on the respective format.

    All details and background

    An AIBOM captures relevant components and source information, such as models and software dependencies. What data is included depends on the scheme used and available evidence.

    ELI5 – Explained simply

    Like an ingredient list for an AI application.

    Why it matters in practice

    Supports transparency and the investigation of dependencies in the AI supply chain.

    Example

    Example scenario: A team documents model versions and libraries for an internally used AI application.

    Pitfalls and limits

    • Incomplete information; outdated versions; confusing a directory with a guarantee of safety or conformity.

    Origin & history

    With the AIBOM project, OWASP is developing approaches and tools for transparency in AI supply chains.

    Use in mid-sized companies

    • Capture components during construction and update the directory when changes occur.

    Related terms

    Matching Flow-alerta service

    AI opportunity analysis & roadmapAI consulting: AI potential analysis & roadmap on tasks, data and prerequisites of a possible first AI use case.

    Matching tool / use case

    View use casesOWASP AIBOM Generator: Document metadata of supported hugging face models as AIBOM; record further system dependencies separately.

    Sources

    Quellenprüfung: 09.10.2026. Die Quellen belegen Definition und dokumentierte Einordnung; Anwendungsbeispiele sind mögliche Szenarien.

    Editorially reviewed on:

    Next step

    Put knowledge into practice

    Discuss your projectView use cases