Enterprise buyers are adding a new requirement to RFPs: auditable trails for every AI agent action. In episode 163, Lucas and Luna unpack why procurement teams now ask vendors how they log, trace, and replay agent decisions — from tool calls to data access. They walk through a concrete example: a financial-services client demanding an immutable record of every step an AI agent took to resolve a support ticket. They explore the technical realities, the governance gaps, and what vendors must build to stay competitive. If you're selling software into regulated industries, this episode breaks down the new yardstick buyers are using. Tune in to learn why 'we have AI governance' is no longer a differentiator — the audit trail is the new baseline.

#AI #AIAgents #AuditTrails #EnterpriseSoftware #RFPs #Procurement #B2BSaaS #Compliance #Governance #RegulatedIndustries #FinancialServices #VendorManagement #CyberSecurity #DataGovernance #Business #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

In this episode of B2B SaaS Talks, Lucas and Luna dig into a surprising new line of questioning in enterprise RFPs: vendor incident response staffing. Inspired by a recent $40 million enterprise deal that nearly collapsed over a single question about on-call coverage, they explore why buyers are now probing the human side of resilience—asking about 24/7 staffing, incident commander roles, escalation paths, and post-incident review processes. Lucas breaks down the shift from checkbox security questionnaires to operational depth, citing the SolarWinds aftermath and a 2026 survey showing 68 percent of enterprises now require documented staffing plans. Luna shares a story about a vendor that lost a deal because its on-call rotation was handled by one person, and they discuss how this trend is reshaping vendor evaluation and internal security team priorities. If you're building or buying B2B software, this episode offers a clear picture of the new due diligence landscape and what it means for your next RFP response.

#B2BSaaS #EnterpriseSoftware #RFPs #IncidentResponse #Cybersecurity #VendorManagement #Procurement #Business #Technology #SaaS #SecurityOperations #OnCall #Resilience #SolarWinds #DueDiligence #FexingoBusiness #BusinessPodcast #B2B

Keep every episode free: buymeacoffee.com/fexingo

Enterprises are no longer satisfied with a SOC 2 report or a security questionnaire. On episode 161 of B2B SaaS Talks, Lucas and Luna dig into the rising demand for vendor penetration testing in enterprise RFPs. They trace how a single breach at a third-party logistics provider pushed procurement teams to require annual red-team exercises, not just attestations. They unpack the difference between a vulnerability scan and a real penetration test, why buyers now ask for the actual findings and remediation plans, and what a small SaaS vendor can do when a customer demands an eight-hundred-thousand-dollar test. Lucas breaks down the growing trend of requiring third-party pentests, the rise of continuous penetration testing, and practical advice for vendors who want to win enterprise deals without bankrupting their security budget. If you sell software to big companies, this episode is essential listening.

#EnterpriseRFP #PenetrationTesting #VendorSecurity #SaaS #B2BSales #Procurement #SecurityCompliance #Cybersecurity #RedTeam #VulnerabilityScan #SOC2 #ThirdPartyRisk #SecurityQuestionnaire #ContinuousPentest #VendorRisk #Business #Technology #FexingoBusiness

Keep every episode free: buymeacoffee.com/fexingo

In Episode 160 of B2B SaaS Talks, Lucas and Luna examine a new clause appearing in enterprise RFPs: AI copyright indemnification. As generative AI tools become embedded in business workflows, buyers are demanding that vendors assume liability for IP infringement claims arising from AI outputs. Lucas walks through a specific Fortune 500 RFP that includes a 40-page indemnification appendix, and explains how vendors are responding with caps, carve-outs, and 'model provenance' audits. Luna brings data from a recent survey showing that 63% of enterprise legal teams now require AI indemnification clauses, up from just 12% two years ago. They discuss the tension between standard contract language and the unpredictable nature of AI training data, and offer practical advice for SaaS vendors preparing their next RFP response. If you're selling AI-powered software to enterprises, this clause could make or break your deal.

#AI #Copyright #Indemnification #EnterpriseRFP #B2BSaaS #LegalTech #Procurement #ContractNegotiation #GenerativeAI #IntellectualProperty #SaaS #Business #Technology #Podcast #FexingoBusiness #BusinessPodcast #SalesStrategy #VendorRisk

Keep every episode free: buymeacoffee.com/fexingo

Episode 159 of B2B SaaS Talks digs into a fresh angle: accessibility compliance in enterprise RFPs. Lucas and Luna explore why buyers are moving beyond basic VPAT checkboxes to demand concrete evidence of an inclusive product lifecycle. They analyze a realistic example—a mid-size SaaS vendor whose thirty-million-dollar deal stalled over a missing accessibility roadmap—and break down the new sections appearing in procurement documents: audit trails for WCAG conformance, incident response for accessibility bugs, and governance tied to the CSRD. The episode covers practical steps vendors can take, from embedding accessibility into design systems to hiring a chief accessibility officer. It also touches on the twenty-billion-dollar market opportunity and the legal risks of ignoring accessibility, including European Accessibility Act deadlines. With their usual mix of specific insights and lively debate, Lucas and Luna give operators and builders a clear playbook for turning compliance into a competitive edge.

#AccessibilityCompliance #EnterpriseRFP #WCAG #InclusiveDesign #B2BSaaS #Procurement #DigitalInclusion #EuropeanAccessibilityAct #CSRD #VendorGovernance #SaaS #ComplianceStrategy #DesignSystems #LegalRisk #MarketOpportunity #BusinessPodcast #FexingoBusiness #TechPodcast

Keep every episode free: buymeacoffee.com/fexingo

On this episode of B2B SaaS Talks, Lucas and Luna explore a new clause appearing in enterprise RFPs: detailed questions about how vendors source and license the data used to train their AI models. They walk through a real anonymized RFP that asks for model training data sources, licensing verification, and audit rights, and discuss why procurement teams are pushing for this transparency. Lucas breaks down the legal and reputational risks that drive the demand, from copyright litigation to biased outputs, while Luna highlights how smaller vendors can use data provenance as a competitive advantage. They also touch on what happens when vendors can't fully answer—and how the market is responding with new data governance standards. If you're selling or buying enterprise software, this episode gives you a clear read on where procurement scrutiny is heading next.

#AITrainingData #DataProvenance #EnterpriseRFP #B2BSaaS #VendorManagement #AIGovernance #DataLicensing #ProcurementTrends #AICompliance #Technology #Business #FexingoBusiness #BusinessPodcast #EnterpriseSoftware #RFP #VendorRisk #DataEthics #AI

Keep every episode free: buymeacoffee.com/fexingo

In this episode of B2B SaaS Talks, Lucas and Luna explore a growing trend in enterprise procurement: RFPs now include detailed questions about a vendor's subcontractors and third-party dependencies. They break down why this matters, using the example of a hypothetical SaaS company that lost a major deal because its cloud provider's data center was in a region flagged by the buyer. They discuss how procurement teams are now auditing not just the vendor, but the vendor's vendors—looking at security, compliance, and operational resilience. Lucas explains the concept of 'fourth-party risk' and how it's becoming a standard part of vendor due diligence. They also share practical advice for SaaS companies on how to prepare for these questions, from maintaining a subcontractor register to including flow-down clauses in contracts. Tune in to understand how to navigate this new layer of procurement scrutiny.

#SubcontractorAudit #FourthPartyRisk #EnterpriseRFP #VendorManagement #ProcurementTrends #SaaSBusiness #BusinessTechnology #RiskManagement #SupplyChain #Compliance #B2BSales #DueDiligence #CloudDependency #OperationalResilience #FexingoBusiness #BusinessPodcast #TechProcurement #VendorOversight

Keep every episode free: buymeacoffee.com/fexingo

Enterprises are adding a new question to their RFPs: what does your AI agent remember about our users, and what happens to that memory after the contract ends? This episode digs into the rise of AI agent memory requirements in enterprise procurement. Lucas and Luna break down the practical implications for SaaS vendors, from compliance and security to the technical challenges of building memory that is both useful and safe. They look at real-world examples, including a large healthcare network’s recent RFP that asked for memory export and deletion specifics, and discuss how vendors can prepare. If you’re selling software to big companies, this is the next frontier in procurement demands.

#AIagentmemory #EnterpriseRFP #B2BSaaS #SaaSProcurement #AIGovernance #DataPrivacy #EnterpriseTech #Business #Technology #Podcast #FexingoBusiness #BusinessPodcast #AICompliance #DataRetention #UserPrivacy #AIEthics #SalesCycle #TechProcurement

Keep every episode free: buymeacoffee.com/fexingo

In episode 155 of B2B SaaS Talks, Lucas and Luna explore why enterprise request-for-proposals now include detailed questions about a vendor's open source dependency policy. With the Log4j and XZ Utils incidents fresh in memory, procurement teams are scrutinizing how software suppliers manage the open source components buried in their products. The hosts walk through a real-world case: a mid-market SaaS vendor that lost a seven-figure deal because it couldn't document its approach to critical open source vulnerabilities. Lucas breaks down the new RFP sections, from dependency inventory to SBOMs to upstream contribution policies, and explains how procurement teams are using these answers to assess supply chain risk. Luna challenges whether asking about contribution policy is a fair proxy for security posture, and they debate where the line should be drawn between a vendor's responsibility and the broader open source ecosystem's. Tune in for a concrete look at how the open source dependency question is reshaping enterprise software sales.

#OpenSourceDependency #RFPTrends #EnterpriseSoftware #SaaSProcurement #SupplyChainSecurity #SoftwareBillOfMaterials #Log4j #XZUtils #VendorRisk #B2BSaaS #TechProcurement #OpenSourceSecurity #DependencyManagement #VulnerabilityManagement #Business #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Enterprise procurement is no longer just checking a vendor's security posture or financial health. In this episode, Lucas and Luna dig into the newest box on the RFP checklist: climate transition plans. They use the example of a major European bank that started asking software vendors for their Scope 1, 2, and 3 emissions data plus a credible net-zero pathway. Lucas explains why 'we're committed to sustainability' no longer cuts it, and why procurement teams are treating transition plans as a proxy for long-term operational resilience. Luna brings up the tension between public climate promises and private sector pragmatism, and they explore how mid-size SaaS vendors can respond without a dedicated sustainability team. If you're selling software to enterprises, this is the question that's starting to appear in Section 9 of the RFP — and it's not going away.

#ClimateTransitionPlans #EnterpriseRFP #SaaSProcurement #Scope3Emissions #Sustainability #NetZero #VendorManagement #B2BSaaS #Business #Technology #FexingoBusiness #BusinessPodcast #EnterpriseSales #ESG #ClimateRisk #SupplierEngagement #ProcurementTrends #SustainableBusiness

Keep every episode free: buymeacoffee.com/fexingo