Third-Party AI

Third-party AI refers to artificial intelligence systems, models, or services developed and maintained by external vendors rather than built in-house by an organization. For enterprise governance, third-party AI introduces critical compliance and risk management challenges, including vendor lock-in, limited transparency into model training data and algorithms, and dependency on external parties for security updates and regulatory compliance. Organizations must implement robust vendor assessment frameworks, contractual safeguards, and ongoing monitoring to ensure third-party AI systems meet their governance standards and regulatory requirements.

1 item

ResearchGlobal2026-08-18

Vendor AI Usage Reports Systematically Filter Harmful Behavior, Study Finds

An independent research platform called the AI Observatory, led by researchers from Stanford and MIT, analyzed over 24,000 real AI conversations and found that usage reports published by major AI companies systematically exclude non-work-related interactions. The omission conceals materially higher rates of sensitive behaviors including harassment, hate speech, and adult content. Enterprise compliance programs that rely on vendor-published data for risk assessments are working from a structurally incomplete picture.

Anthropic OpenAI AI transparency usage data independent audit vendor risk risk assessment third-party AI