Risk and exam
Shareable reference
Vendor, model host, data broker, concentration, audit rights, and a tested 72-hour manual path.
Share: https://meridian.keyteller.com/use-cases/partner-risk-in-an-ai-supply-chain
A practical example
A payments or lending firm is about to expand a cloud inference vendor that already sits under onboarding. The desk maps the chain (vendor, model host, data broker), criticality, audit and access rights, concentration, location, and a tested exit: cutover, data migration, and a 72-hour manual path. Supervisors now ask how you leave a compromised vendor, not whether the MSA has an AI clause. A controls report does not answer model change or reconstructability.
What you leave with. A supply-chain risk view with exits and named owners.
Not this. Adding AI to the vendor questionnaire or an untested we-could-switch sentence. Calendar for this class of work is measured in weeks, not hours.
Related situations