A.10 Third-party and customer relationships

A.10 defines the requirements for managing third-party and customer relationships within an AI Management System, ensuring that external providers and users are assessed for competence, security, and ethical compliance, and that contractual and communication processes address AI-related risks, responsibilities, and performance monitoring.