For each high-risk model, describe the data used in training, including provenance, third-party sources, and any use of consumer data.

No approved record of the provider model behind Claims triage (MDL-001)

Claims triage (MDL-001) calls a third-party model as it is, so the training data is the provider's, and the record a reviewer needs is different: which model, which version, the provider's own documentation of its data, and what your product adds to it. Because the model reaches a consumer, a reviewer who cannot find that record cannot tell whether the provider's data practices were ever looked at before the model touched insurer data.

To fix: Record the provider's published model documentation by name, version and date, together with the data your product adds to it, and have that one page approved. The provider's documentation is the provenance record; your page is the evidence that somebody read it.