The Upstream Vendor Risk Protocol Bundle

Two companion publications, sold together, for K-12 districts governing AI vendors. The 171-page Upstream Vendor Risk Evaluation Protocol takes you through ten vendors across four evaluation domains. The 13-page Incident Language Protocol gives you the controlled vocabulary that makes every entry hold up under review.

Districts are adopting AI vendors faster than they can document the decisions behind those adoptions. When a parent asks what data a vendor collects, when a board asks who approved a tool, when a federal monitor asks for the review record, the answer is too often a hallway conversation no one wrote down. The exposure is the missing paper trail. This bundle replaces ad hoc vendor review with a structured, repeatable process and replaces vague incident notes with controlled, auditable language. It turns "we should probably look into that" into a signed, dated, filed record.

The bundle is built so every decision a district makes is defensible after the fact. The workbook walks evaluators through the same four domains for every vendor, in the same order, with the same documentation requirements, ending in a signature page that names the accountable human. The companion protocol ensures the language inside that record meets the standard a federal or state reviewer expects: precise incident descriptions, verb-first action records, defined resolution states, and explicit review triggers. Together, the two volumes produce documentation that does not require the original evaluator to be in the room to make sense to whoever reads it next.