Edition 1
Third-Party Shadow AI
The hidden AI supply chain inside the products your business depends on. Seven connected articles and a practical governance framework.
From the Editor
“The interesting questions are often around the model.”
Your AI policy may stop at your front door. This first edition follows the information, permissions and dependencies that continue beyond it, into the suppliers delivering your software and services. It asks what we should know, what we should control and what we are actually paying for.
Gary Marrs Editor, Beyond the Model
In this edition
Contents
AI governance extends beyond the tools your own employees use. This edition examines the hidden AI in supplier workflows, the permissions behind agentic systems, changing contracts, human expertise and the dependencies underneath the service.
Read the seven articles in sequence, or begin with the question that matters most to your organisation. The closing framework turns those questions into a practical supplier review.
- 01Are You Paying Someone Else to Ask AI?
- 02The Prompt Is Not the Security Boundary
- 03Your Supplier Contract May Describe Yesterday's Service
- 04What Are You Actually Paying Your Supplier For?
- 05What Happens If Your AI Supplier Loses Its AI Supplier?
- 06Is Your Supplier Replacing Experience With AI?
- 07A Skill File Can Be a Supply-Chain Attack
- 08A Practical Third-Party AI Governance Framework