AI Governance

AI Vendor Diligence

Created a diligence and contracting standard for third-party AI tools, including training-data and output terms.

The challenge

Dozens of vendors were quietly adding AI features to existing products, changing how customer data was used without a corresponding contract review.

Our approach

Diligence questionnaire

A short, answerable set of questions on training data, retention, sub-processors, and model updates.

Fallback positions on output ownership, IP indemnity, and restrictions on training with customer data.

Flagged existing agreements for re-papering as vendors introduced generative features.

AI Governance

Built an end-to-end model governance framework covering intake, risk classification, and human oversight.

Send us the outline of your matter and we will respond with a practical first read.