AI-on-SaaS Risk and Responsible AI

Acknowledgement: Shared by Peter Bamuhigire, techguypeter.com, +256 784 464178.

Use When

• The proposal must present an AI risk register inside the Risk Analysis section.
• The buyer's CISO, DPO, or ethics committee will review the proposal.
• The bid is in a regulated vertical (financial services, insurance, healthcare, public sector, education).
• The bid is in an AI-Act-relevant jurisdiction (EU export bids) or a domestic AI-guidance jurisdiction (Kenya, Nigeria, South Africa, Uganda, Rwanda).
• The agency must demonstrate Responsible-AI practice, not promise it.

Do Not Use When

• The engagement is non-AI (use risk-management).
• The engagement is generic AI strategy with no SaaS layer (use ai-transformation-proposal).

Required Inputs