EU AI Act

2026-09-21

Today · AI GOVERNANCE EUACT

A new episode highlights critical gaps in standard vendor contract templates when applied to AI deployments, exposing risk management deficiencies directly relevant to EU AI Act compliance. Practitioners must address data handling, model transparency, and contractual obligations specific to AI systems to meet regulatory requirements.

→Vendor Contract Templates Inadequate for AI Deployments: Standard vendor agreements lack provisions for AI-specific risks including data lineage, model provenance, and algorithmic transparency—all mandatory under EU AI Act compliance frameworks.

Review and update vendor contracts immediately to include AI-specific clauses covering data handling, model documentation, and transparency requirements to ensure EU AI Act compliance.

Signals in this digest

[Audio] Episode 450 -- Your Vendor Contract Template Was Not Built for AI

In this episode of Corruption, Crime and Compliance, Michael Volkov explains why standard software procurement templates fail to protect organizations in AI vendor relationships, and what to do about it. He walks through the structural differences that make AI vendors riskier than traditional software vendors, multi-layered data flows through underlying foundation models, frequent model swaps, and vendors' commercial incentive to train on customer data, and identifies the specific gaps legacy...