What is an SBOM and an AI-BOM?
An SBOM is a machine-readable inventory of the components a piece of software is built from, and an AI-BOM is a similar inventory extended to models and data.
The abbreviation stands for software bill of materials. It lists the libraries and versions a product is built on, and how they relate to one another. When a vulnerability becomes known, it is then quick to see whether it is present in your own systems.
For AI a list of program code is not enough. An AI-BOM also describes which models are used, where they come from, which data they were trained or adapted on and which infrastructure they run on. In May 2026 the G7 Cybersecurity Working Group published guidance on what such an inventory should contain at a minimum.
The EU Cyber Resilience Act requires manufacturers of products with digital elements to draw up an SBOM covering at least the product's top-level dependencies, as part of handling vulnerabilities. The requirement applies from 11 December 2027.
How it works
The inventory is generated automatically when the software is built and stored in a standardised, machine-readable format. It records the name, version, supplier and dependencies of every component, ideally with checksums showing the files are unchanged.
An AI-BOM adds details about the models: where they were obtained, which version is in use, which data they were adapted on and which terms apply.
Why it matters
Without an inventory, a simple question takes a long time to answer when a vulnerability becomes known: is it here? With the inventory, you can search. It also makes a supply chain attack easier to spot and contain.
What to keep in mind
An inventory is only valuable if it is kept current. Update it with every new release.
Ask suppliers whether the inventory covers models and data, and how they follow up vulnerabilities themselves.
What it means for you
Ask your supplier for an SBOM, and whether the AI components are included. Use the inventory to follow up vulnerabilities and origin for as long as you use the product.
Common questions
What is the difference between an SBOM and an AI-BOM?
An SBOM lists the software's components. An AI-BOM adds models, datasets and their origin, which an ordinary inventory of program code misses.
Who should produce the inventory?
Whoever makes or supplies the software. The buyer can ask for it and use it to follow up vulnerabilities. Read more about supply chain attacks.
Do we need an SBOM for our own AI solutions?
It is wise as soon as the solution relies on open models or packages from outside. The inventory makes it possible to respond quickly when a vulnerability becomes known.
Sources: NIST on software bill of materialsCISA on SBOMG7, SBOM for AI Minimum Elements (2026)Regulation (EU) 2024/2847 on EUR-Lex
Related terms
Read more
All terms Updated