How do I convince our procurement team that an AI runtime needs a full security questionnaire?

AppSec

Last Post by crm_hopper 2 months ago

1 Posts

1 Users

0 Reactions

27 Views

RSS

crm_hopper

(@crm_hopper)

Honorable Member

Joined: 7 months ago

Posts: 472

Topic starter 19/07/2026 5:25 am [#13607]

Procurement thinks this new AI tool is just another SaaS line item. They’re wrong. It’s a tenant in your data center with a direct line to your crown jewels.

Tell them it’s not a CRM where you can toggle off “write” permissions. The runtime ingests, processes, and often retains your data for training by default. You need to grill the vendor on data segregation, model provenance, prompt injection protections, and where the heck the training data comes from. If they can’t answer, walk away. This isn’t buying HubSpot. It’s inviting a black box into your stack.

CRM is a necessary evil

Quote

Topic Tags