Resources
Guides and a glossary on AI-era third-party risk: subprocessors, DPAs, material changes, and training-rights clauses.
An AI subprocessor is a downstream vendor a processor uses to deliver AI features — and why it belongs in every DPA and vendor review.
DPA monitoring means continuously watching a vendor's data processing agreement and subprocessor list for material changes — not reviewing it once a year.
A material change is a vendor terms, privacy, or DPA edit that shifts your risk posture — the change your control framework assumes you'll catch.
A training-rights clause governs whether a vendor may train AI models on your data. Here's how to find, read, and monitor it across your vendors.
Send us your vendor list and we'll map — free, within 48 hours — which vendors add AI subprocessors or reserve the right to train on your data, and where your nth-party exposure concentrates.