AIRiskAware
AI Governance Glossary
Governance Practice

What Is AI Inventory?

AI Inventory is a comprehensive and maintained register of all AI systems that an organisation develops, procures, or deploys, typically including risk classification, use case, data sources, and ownership.

Definition

AI Inventorya comprehensive and maintained register of all AI systems that an organisation develops, procures, or deploys, typically including risk classification, use case, data sources, and ownership.

An AI inventory is the starting point for AI governance. Without knowing what AI systems you have, no other governance control can be applied systematically. Most governance frameworks mandate it — AU AI6 Practice 1, ISO/IEC 42001 Clause 6, NIST AI RMF GOVERN 2.2, and implicitly the EU AI Act's technical documentation obligations. In practice, organisations frequently underestimate their AI inventory because of shadow AI (employees using AI tools without formal approval or registration). A realistic inventory process requires active discovery, not just registration of approved tools.

Source: AU AI6 (DISR, October 2025); ISO/IEC 42001:2023; NIST AI RMF

Plain-language explanation

An AI inventory is the starting point for AI governance. Without knowing what AI systems you have, no other governance control can be applied systematically. Most governance frameworks mandate it — AU AI6 Practice 1, ISO/IEC 42001 Clause 6, NIST AI RMF GOVERN 2.2, and implicitly the EU AI Act's technical documentation obligations. In practice, organisations frequently underestimate their AI inventory because of shadow AI (employees using AI tools without formal approval or registration). A realistic inventory process requires active discovery, not just registration of approved tools.

Primary source: AU AI6 (DISR, October 2025); ISO/IEC 42001:2023; NIST AI RMF

See where you stand on AI governance

Take the free 7-question maturity assessment and get a personalised action plan.

Free assessment — 3 minutes →