Run the Section K review in the meeting, not in a spreadsheet.

Q: What is SSPA Section K?

Section K is the part of Microsoft's Supplier Data Protection Requirements that covers AI Systems, introduced in DPR version 10, effective September 2024. The current version is 12, March 2026, with Section K as requirements 51 to 63. It applies to suppliers who use AI in what they provide to Microsoft.

Q: Does this kit make me compliant?

No. It prepares your evidence and program so an independent assessment or ISO 42001 certification is efficient. Compliance is validated by a qualified independent assessor or by an accredited certification body.

If you supply Microsoft and use AI, DPR Section K decides your SSPA status, and a Red status blocks the work. This kit gets your evidence and program ready, and its guided dashboard lets the whole team work live: screen for prohibited practices, cycle statuses as the room decides, and drop evidence into organized folders. When the meeting ends, the board report prints and the Excel workbook exports in one click. One HTML file, 100% local, under your company name.

$599One-time · editable Word and PDF

Instant download · 14-day guarantee

Evidence collector: drag files onto artifact rows and they file into organized local folders

Key feature · a Create button on every artifact

14 artifacts. 14 engineered prompts. Zero blank pages.

Every evidence row carries a Create button. It opens a consultant-grade drafting prompt built for that exact artifact: paste it into the AI system your company has approved, answer a short interview, and a structured base draft comes back with every unverified point flagged and a counsel-review note built in. Your AI, your environment; nothing runs through ours.

The blank page is what consultants bill for. This kit deletes it.

Who this is for

Suppliers who just learned Section K applies, were flagged in an SSPA cycle, or are heading into an annual assessment with AI in scope. If a Microsoft engagement depends on your SSPA status and you use AI, this is built for you.

What is inside

Prohibited-practice and route screening worksheet. The version 12 screen: confirm your AI Systems terms are in place and nothing you run is a Prohibited Practice, then choose your assurance route and record it.
Section K to ISO 42001 crosswalk. Every Section K focus area mapped to the ISO 42001 anchor that satisfies it and the evidence an assessor expects to see.
Evidence index. The exact artifacts to assemble, the same set that underpins both an independent assessment and an ISO 42001 program.
Your assurance path. Independent assessment versus certification, when you may choose, and when certification is required.
Path to Green. A phased plan from scope and profile through assessment, submission, and annual maintenance.
Interactive readiness dashboard. A single HTML file that opens in your browser and turns the kit into a live tracker under your company name. Work it on a shared screen in the review meeting instead of passing a spreadsheet around: run the v12 screening worksheet, cycle statuses as the room decides, and track every evidence artifact and each phase of the path to Green. When the meeting ends, the board-ready report prints and the Excel workbook exports in one click, already current, with nothing to retype. Runs 100% locally; nothing you enter leaves your machine.
Drag-and-drop evidence collector. Point the dashboard at a local folder once and it builds a numbered subfolder per artifact with a README explaining what belongs in each. Drop files on any row and they are copied in, named by section, and tracked on the dashboard and in the Excel export. Works in Chrome and Edge; everything stays on your machine.
Fourteen engineered drafting prompts. Every evidence artifact carries a Create button that opens a consultant-grade prompt to paste into your own company-approved AI system. It interviews you first, then drafts the base document with review flags wherever a fact needs verification and a counsel-review note built in, so the blank page never stalls the work. Your AI, your environment; nothing runs through ours.

Honest about what this is. This kit prepares you. It is not an assessment and it is not a certificate. ISO 42001 certification is issued by an accredited body, and an independent Section K assessment is performed by a qualified assessor; Microsoft publishes a preferred assessors list. Microsoft's requirements change, so map against the current DPR. Educational, not legal advice. Independent and not affiliated with Microsoft, ISO, the IEC, NIST, or the EU.

What you get

Editable WordPDFInteractive dashboard14 drafting promptsYours to keep14-day guaranteeMapped to ISO 42001

$599 · Delivered by email on purchase

Common questions

What is SSPA Section K?

The part of Microsoft's Supplier Data Protection Requirements that covers AI Systems, introduced in DPR version 10, effective September 2024. The current version is 12, March 2026, with Section K as requirements 51 to 63. It applies to suppliers who use AI in what they provide to Microsoft.

Do I need ISO 42001 to supply Microsoft?

Not necessarily, but independent assurance is required. Under DPR version 12, every supplier providing AI Systems needs independent assurance for Section K, and both routes are open: an independent assessment against Section K, or an ISO/IEC 42001 certificate, which Microsoft relies on as closely mapping to the DPR.

Does this kit make me compliant?

No. It prepares your evidence and program. Compliance is validated by a qualified independent assessor or an accredited certification body.

What format is it?

Editable Word and PDF, plus an interactive readiness dashboard: a single HTML file that runs 100% locally in your browser, no account or connection needed. Yours to keep, with a 14-day guarantee.