C7. IP and Licensing Analysis Assessment of copyright exposure, licence compatibility, and IP risk for all model components, training data, and third-party dependencies. Records the organisation’s interpretation of ambiguous licence terms and risk acceptance. Automated licence compliance scanning in the CI pipeline covers all dependencies. Where terms are ambiguous, the Legal and Regulatory Advisor documents the organisation’s interpretation. Responsible party: Legal and Regulatory Advisor reviews. AI System Assessor compiles. AI Governance Lead signs off on residual IP risk. Regulations addressed: Annex IV(2)(b) (component description); Directive 2019/790 (Copyright in the Digital Single Market); licence-specific obligations. Key outputs

• Licence compatibility analysis
• Copyright exposure assessment (TDM compliance)
• Ambiguous term interpretation register