AI-BOM Visualizer

Upload your AI Bill of Materials in CycloneDX ML-BOM or SPDX 3.0.1 AI Profile format to map model lineage, training datasets, licenses, and the blast radius of any component in the graph.

Upload Your AI-BOM

Drag & drop or click to upload a CycloneDX ML-BOM or SPDX 3.0.1 AI Profile file

No AI-BOM yet?

Hit Load sample above to walk through a fine-tuned speech model, its base model, and the corpus it was trained on. To produce your own, read the AI-BOM guide for the field list, format comparison, and pipeline steps.

What is an AI-BOM?

An AI Bill of Materials inventories everything your AI system is built from: training datasets, model weights, frameworks, prompts, guardrails, and the services it runs on. An SBOM tells you which library shipped. An AI-BOM tells you which dataset taught the model to answer the way it does.

That distinction matters during an incident. A poisoned training corpus produces weights that pass every build test and then fail on a specific trigger in production. Without dataset versioning and training lineage recorded somewhere, tracing that back is guesswork.

Supported Formats:

  • OWASP CycloneDX 1.5 to 1.7 ML-BOM (JSON)
  • SPDX 3.0.1 AI Profile (JSON-LD)

What you get:

  • Model and dataset lineage graph
  • Blast radius tracing from any node
  • Model card inspector with fairness and ethics
  • SHA-256 coverage and provenance risk scoring

Which regulators ask for this

  • EU AI Act, Articles 10 and 13. Data governance records and technical documentation for high-risk systems.
  • NIST AI RMF 1.0. Continuous inventorying and provenance tracking across Govern, Map, Measure, Manage.
  • CISA SBOM for AI. Machine-readable artifacts covering base models, datasets, and runtime environments.
  • ISO/IEC 42001. Third-party ML component risk management and data integrity verification.

Want this handled for you?

This free tool reads one file. Prismor can generate AI-BOMs at every checkpoint export, verify weight hashes against your registry, and keep model and dataset lineage current across every pipeline you run. Tell us your stack and we'll set it up for you.