Topic

Vendor Due Diligence

Vendor due diligence is the systematic process of evaluating third-party AI service providers, technology vendors, and contractors to assess their security practices, compliance certifications, data handling procedures, and operational reliability before engagement. This is critical for enterprises because outsourced AI systems introduce external dependencies that can create regulatory, security, and reputational risks if not properly vetted. Organizations must document vendor assessments, audit rights, and contractual obligations to maintain accountability over their AI governance framework and ensure compliance with regulations like GDPR, HIPAA, and emerging AI-specific legislation.

1 item

ResearchUS2026-07-12

Ten-Step Enterprise AI Governance Framework from Fisher Phillips Puts Governance Committees, Bias Audits, and Vendor Due Diligence at the Center

Law firm Fisher Phillips published a practitioner guide outlining ten foundational steps for businesses building AI governance programs. The guide calls for forming dedicated governance committees, defining approved AI use cases, implementing bias-checking protocols, and mandating annual employee training. It also requires organizations to conduct periodic audits and demand evidence of diverse training datasets from AI vendors.

Fisher Phillips governance committee bias audits vendor due diligence employee training AI governance program US AI regulation enterprise compliance