So you have your AI policy in place and are carefully controlling access to new apps as they launch, but then...

...you realize your already-approved tools are themselves starting to leverage 4th party AI vendors.

Welcome to the modern digital economy.

Things are complex and getting even more so.

That's why you need to incorporate 4th party risk into your security policies, procedures, and overall AI governance program.

Check out the full post with the Asana and Databricks examples I mentioned: https://blog.stackaware.com/p/ai-supply-chain-processing-retention-risk