CleanStart AI-SBOM
View Datesheet
Traditional SBOMs capture code dependencies but miss AI components such as dataset provenance, model lineage, weights, adapters and fine-tuning artifacts, and current formats lack alignment with NIST AI RMF or the EU AI Act. This datasheet describes CleanStart AI-SBOM, which captures, signs and validates dataset lineage, model metadata and dependency graphs at build time using the SPDX 3.0 AI schema and SLSA Level 4 build processes. It exports signed attestations for NIST AI RMF, EU AI Act and FedRAMP and cuts manual reporting effort by up to 80 percent.