AI Systems CBOM Profile, v0.1 draft

Cryptographic inventory for AI systems: models, data and pipelines

A free, open CycloneDX 1.7 community profile covering the cryptography that protects AI pipelines, from model signing to inference APIs.

For: AI security leads, MLOps engineers, chief AI and data officers

Download the profile (CycloneDX 1.7)Measure your own exposure (free)

v0.1 draft, updated 7 Oct 2026. Validated against the CycloneDX 1.7 schema. A starting point, not a compliance determination.

Why now

  • EU AI Act. High-risk system obligations apply from 2 Dec 2027 under the Digital Omnibus; robustness and cybersecurity are required.
  • ISO/IEC 42001. AI management system standard; supply-chain and integrity controls benefit from a cryptographic inventory.
  • NIST FIPS 204 and 205. Post-quantum signatures suitable for long-lived model and dataset integrity.

A practical migration path

  1. Inventory model, dataset and container signing keys
  2. Record transport and secrets protection for inference APIs
  3. Identify long-lived artefacts needing post-quantum signatures
  4. Verify signatures at every deployment step
  5. Evidence integrity controls for AI governance reviews

From profile to evidence

Learn the risk in OpenRiskLab, build and keep your own CBOM in QDayRisk, and certify readiness in the public PQReady registry.

Contribute or stay informed

This profile will be updated to the CISA and NIST CBOM minimum elements when they are published. Practitioners, vendors and standards bodies are invited to co-author it under an open licence, with credit. How contributions work.

Notify me of updatesContribute