#TPRM

Third-Party Risk Reviews Are Not Asking the AI Questions

Your vendor questionnaire covers encryption and breach notification. It rarely covers who trains on your data, which sub-processor runs the model, or what happens to your prompts.