Governance, Law & Compliance
Vendor risk
Risk introduced by relying on an outside AI provider, model, platform, or service.
Example
A company evaluates whether an AI vendor can meet its security, privacy, and reliability requirements.
Why it matters
It helps purchasing teams consider dependencies that a product demonstration may not reveal.
You'll hear it
“What is our backup plan if this vendor closes the service?”
Can you control it?
Sometimes
Sometimes. An organization can define or influence vendor risk through its policies, processes, contracts, and product choices. Individual users may have fewer controls.
Common questions
- Does a well-known vendor remove the risk?
- No. Large providers can also have outages, change terms or offer a poor fit for your needs.
- Should the review end after purchase?
- No. Important changes to the service or agreement can alter the risk.
- Can a small pilot reveal every vendor problem?
- No. A pilot may miss issues that appear with heavier use, sensitive information or long-term reliance.