Supply Chain Risk

Supply chain risk in AI governance refers to the vulnerabilities and threats introduced through third-party vendors, data providers, model suppliers, and infrastructure partners used in AI systems. Organizations must assess and manage risks across the entire AI supply chain, including model provenance, data quality and origin, licensing compliance, security of training data, and potential dependencies on unreliable or compromised providers. This matters for compliance because supply chain failures can introduce bias, security breaches, model poisoning, and regulatory violations that remain the organization's responsibility even when outsourced.

1 item

EnforcementUS2026-07-21

Treasury's IP Theft Sanctions Threat Puts Every Enterprise Using Chinese Open-Source AI Models on Notice

U.S. Treasury Secretary Scott Bessent announced on July 21, 2026 that the federal government will examine Chinese open-source AI models for intellectual property theft and may impose sanctions on Chinese AI companies found to have stolen IP from American firms. The announcement extends an existing enforcement posture that includes chip export restrictions and follows reported consideration of a wholesale ban on Chinese open-source models. Enterprises that use, distribute, or build on Chinese open-source AI models now face materially elevated IP and sanctions compliance risk.

IP theft sanctions open-source AI US-China AI competition export controls OFAC Kimi K3 supply chain risk