Vendor AI due diligence for business buyers

Vendor selection should test the operating relationship, not only the demo.

Data and boundaries

Clarify what data is sent, retained, used for training, exposed to subprocessors or transferred across jurisdictions.

Model and service dependency

Understand which underlying models are used, how substitutions are handled and whether important behavior can change without your approval.

Controls and evidence

Ask about permissions, logging, evaluation, incident response, security assurance and administrative controls appropriate to the use case.

Exit and portability

Know how data, configurations and workflows can be exported or replaced. Switching cost is part of total cost.