03 · Analyse risk · SaaS

Assess supplier, licensing and sourcing risk

Focus on cross-tenant exposure, prompt injection, unsafe workflow actions, unannounced model changes and customer trust.

SAAS WORKING CONTEXT

Assess SaaS release risk

A fast-growing software provider is embedding third-party AI into a multi-tenant product. Enterprise customers expect security, reliability and contractual clarity.

Evidence bar

Security test report
Prompt-injection workpaper
Supplier change evidence

REVIEW CHECKPOINTS

Supplier & Buy-v-Build Review

Test isolation and adversarial inputsRecord contractual and subprocessor gapsDefine blockers for data leakage or unsafe actionAccountability cannot be outsourcedCheck downstream model dependenciesPlan exit before launch

INTERACTIVE REVIEW MEETING

Pressure-test your reasoning

Business unitUrgent procurement

A free AI tool solves the problem today. Can the team trial it with internal data?

Write at least 40 characters to reveal the review criteria.

SupplierMaterial model change

The hosted model changed without notice. Can prior approval stand?

Write at least 40 characters to reveal the review criteria.

Supplier & Buy-v-Build Review

Complete the fields against the saas operating context. Your work saves automatically in this browser.

Supplier AI due diligence checklist