Lifecycle
Data Sourcing & Preparation
2 controls apply at this stage.
- preventive
AI-CTRL-002
Training Data Provenance and Lineage
Establish and maintain documented provenance and lineage for all training, fine-tuning, and evaluation data used by AI systems, including legal basis, licensing, sensitivity classification, and transformations applied.
Data GovernanceISO 42001 NIST AI RMF EU AI Act OWASP LLM Top 10 +5v1.0.0 Reviewed 2026-05-01 - preventive
AI-CTRL-013
Personal Data Minimization in Training and Inference
Ensure that personal data used in training, fine-tuning, evaluation, and inference is minimized to the data strictly necessary for the stated purpose, processed under a defensible lawful basis, and subject to the rights of affected individuals.
PrivacyISO 42001 NIST AI RMF EU AI Act OWASP LLM Top 10 +5v1.0.0 Reviewed 2026-05-01