Procurement
Contractual Language That Binds Vendors to Zero Training on Enterprise Prompt Data
Vendor commitments must cover subprocessors, survive termination, and resist policy changes.
Sujata Krishnamurthy
· 9 min read
Regulated Data Risk
Procurement Criteria for Verifying Vendor-Access Lockout in Enterprise AI Contracts and Architecture
Enterprises need technical proof, not promises, that vendors cannot access proprietary AI data.
Mirela Vosburgh
Red Flags in AI Vendor Terms of Service for Enterprises
Distinguish between contractual promises and architectural safeguards when evaluating AI vendors.
Tomáš Červenka
Contractual and Technical Controls That Lock Vendors Out of Your Prompts and Outputs
Combining contracts and architecture closes the gaps each alone leaves open.
Darnell Okafor-Baptiste
AI Inference Log Exposure in Multi-Tenant SaaS Platforms
Sensitive data leaks across tenant boundaries through cache timing, orchestration, compute.
Darnell Okafor-Baptiste
AI Assistants That Use Confidential Computing to Keep Prompts Private From the Provider
TEEs encrypt AI prompts during processing, not just in transit.
Darnell Okafor-Baptiste
Prompt Injection Attacks Targeting Enterprise AI Assistants
Security patches won't stop prompt injections; enterprises must limit AI assistant access instead.
Sujata Krishnamurthy
Evaluating AI Assistants for Data Collection and Monetization Risk in Vendor Procurement
Architectural controls matter more than contractual promises when assessing AI vendor data risks.
Mirela Vosburgh