Supplier risk01
Are You Paying Someone Else to Ask AI?
Your internal AI policy may not follow information into your supplier’s development and support processes.
Article · 3 min read↗
Edition 01 Third-Party Shadow AI
Are you paying someone
else to ask AI?
The hidden AI supply chain inside the products your business depends on.
Read the editionFrom the Editor
“The interesting questions are often around the model.”
Your AI policy may stop at your front door. This first edition follows the information, permissions and dependencies that continue beyond it, into the suppliers delivering your software and services. It asks what we should know, what we should control and what we are actually paying for.
Gary Marrs Editor, Beyond the Model
Inside Edition 1
Follow the questions.
Security02
The Prompt Is Not the Security Boundary
Agents turn an information question into a permissions question. What can they reach, and what can they do?
Article · 3 min read↗
Contracts03
Your Supplier Contract May Describe Yesterday's Service
The product may look unchanged while its delivery model, data flows and human oversight have shifted.
Article · 3 min read↗
Value04
What Are You Actually Paying Your Supplier For?
The AI Value Chain Test separates access to common technology from expertise, validation and accountability.
Article · 3 min read↗
Resilience05
What Happens If Your AI Supplier Loses Its AI Supplier?
A claim to support multiple models is not the same as a tested plan to keep your service running.
Article · 3 min read↗
Assurance06
Is Your Supplier Replacing Experience With AI?
Watch for patterns in review capacity, service quality and technical ownership, rather than treating layoffs or faster releases as proof.
Article · 3 min read↗
Security07
A Skill File Can Be a Supply-Chain Attack
Downloaded instructions, bundled scripts and changing external references can introduce risk into an agent’s workflow.
Article · 3 min read↗
Governance08
A Practical Third-Party AI Governance Framework
Eight connected disciplines to carry supplier AI governance from discovery through continuity, exit and value.
Framework · 3 min read↗