# Ask a supplier for evidence

Taiga Learning · Worksheet
https://taiga.training/en/lessons/vendor-evidence/

Use fictional or approved information. Do not put secrets in this worksheet.

## Learning objectives
- Separate a product claim from evidence of the required behavior.
- Design an evaluation using your own scenario and acceptance criteria.
- Record unresolved requirements without treating them as confirmed capabilities.

## Exercise
A fictional supplier says its AI development product is enterprise-ready. Select three requirements from the table. For each, write a test, request an artifact, name a reviewer, and define the consequence of a missing answer.

## Your response
- Scenario and scope:
- Assumptions and open questions:
- Proposed answer or decision, with reasons:

## Verify your response
| Claim or criterion | Evidence or test | Result or gap | Owner |
| --- | --- | --- | --- |
| | | | |
| | | | |
| | | | |

## Next action
- Action, owner, and date:
- When will you review this response?

## Principle to retain
A useful supplier answer identifies the behavior, its limits, the evidence, and the party responsible for keeping it true.

## Sources
- [NIST: Secure Software Development Framework](https://csrc.nist.gov/pubs/sp/800/218/final)
- [Taiga: Ten questions for an AI development vendor](https://tai.ga/en/resources/ten-questions-ai-development-vendor/)
- [Taiga Trust Centre](https://tai.ga/en/trust/)

This worksheet supports learning. Completing it does not itself authorize a production change.