AI SaaS Compliance Checklist

• Data mapping & retention policy
• DPA with subprocessors
• Access controls & SSO/MFA
• Audit logging
• Vulnerability management
• Incident response plan
• Privacy policy & ToS