That email is landing in SME inboxes every week. The old supplier questionnaire, with its SOC 2 report, GDPR clauses and page on uptime, no longer covers what the software is doing.
If a vendor is embedding a model into a product you depend on, your due diligence needs a new section. Here is what to ask, by scenario, before you sign.
The Vendor Who Bolted a Chatbot Onto an Existing Product
This is the most common case and the easiest to under-scrutinize. The product you already use has sprouted a conversational assistant, a “draft with AI” button, or a summarization pane. The vendor calls it a feature. For your risk register it’s a new data flow.
Support authors and subscribe to content
This is premium stuff. Subscribe to read the entire article.
Login if you have purchased
