# Self-hosted AI security questionnaire

Prepared by Matrix OS. Adapt to your organization's procurement process.
For every answer record: requirement; demonstrated / documented but untested / planned / unavailable; evidence link; build and configuration; date; owner; remaining gap and next action.

1. What product, edition, release and deployment profile are proposed?
2. Where do extraction, embeddings, inference, tools, logs and backups process data?
3. Which external services are required for installation, sign-in, runtime, licensing, updates and recovery?
4. Who operates and supports each component?
5. How are users admitted, changed and removed, including existing sessions?
6. How do retrieval permissions follow source access, membership changes and deletion?
7. What filesystem, execution and network authority do agents receive; which actions require human approval?
8. Which required actions are recorded; who can inspect and retain those records?
9. Who can obtain secrets or support access; how is that access revoked?
10. How are release artifacts, dependencies and provenance verified during import?
11. How does a failed update or lost host get recovered; what state is included?
12. How are task quality, exportability and the pilot stop/expand decision tested?

## Scope

- Desired workflow and currently blocking restriction:
- Sponsor, operator, data owner and reviewer:
- Approved sample and prohibited actions:
- Requirements that prevent a purchase:
- Evidence required before live data:
- Decision owner and review date:

This is a blank evaluation aid, not evidence that Matrix or any vendor satisfies these requirements.
Guidance: https://matrix-os.com/blog/self-hosted-ai-security-questionnaire