Meet us Meet us
Book a consultation Own your AI
SolutionsServicesAI Readiness AssessmentAI GovernanceBLDR DeploymentOwn your AIFree toolsAI Readiness CheckAI Governance CheckShadow AI Risk CalculatorAI Health and Sovereignty Check
ProductsPlatformBLDRBLDR DeploymentBLDR at workAI productsGusIkraaSanad
RegionsWhere we workAPACGulfRules we build forPrivacy Act ADM rulesGuidance for AI AdoptionPDPL and NCA
InsightsStart where you areNew to thisFeeling the painExploring optionsComparing vendorsPopular answersIs ChatGPT safe for company data?What is sovereign AI?Why enterprise AI pilots failAll insights
CompanyInovaAboutLeadershipOur workNewsroomWork with usPartnersCareersTrust and legalBook a consultationContact
Free toolsBook a consultation Explore BLDR
04 Comparing vendorsGlobal6 min read

What should you ask an AI vendor before you sign?

Youssef Jalloul
Youssef JalloulFounder and CEO, Inova AI Solutions · Sydney · Updated 9 November 2026
Short answer

Ask where the models run, who processes your data, whether you can swap models, how agents are permissioned and approved, what is logged and where, how you exit, what it costs over three years, which systems it connects to today, what certifications it actually holds, and to see it running on real systems.

Key facts
  • Gartner estimates only about 130 of thousands of agentic AI vendors are genuine.Gartner, Over 40% of agentic AI projects will be canceled by end of 2027 (25 Jun 2025)
  • 71% of executives say switching their primary AI vendor would be difficult.IBM Institute for Business Value, The Calculus of AI Sovereignty (17 Jun 2026)
  • 79% of finance leaders had AI cost overruns in the last 12 months.DoiT survey by Sapio Research, Feb 2026 (via Insentra)

The ten questions

1. Where exactly do the models run, and can we choose? 2. Which companies process our prompts and documents? 3. Can we swap the model without rebuilding our agents? 4. How are agent permissions set, and which actions need a human approval? 5. What is logged, where is it stored and who can read it? 6. How do we export our data, agents and logs if we leave? 7. What will it cost over three years, including model usage? 8. Which of our systems does it connect to today, not on the roadmap? 9. Which certifications do you hold now, and which are on a roadmap with dates? 10. Can we see it running on real systems, not a demo?

What good answers sound like

Specific places, named sub-processors, a gateway that separates models from agents, an approval model you can configure, logs you own, an exit clause, a cost model per agent or workflow, live connectors, honest certification status, and a reference you can call.

How we answer them

We publish our answers on our Trust page and in the security pack: dedicated deployment where you decide, a governed gateway for every model call, approvals and audit built in, connectors to SAP Ariba, SAP ERP and on-prem ERPs, and a certification roadmap rather than a claim.

Questions people also ask

Who should ask these questions?
Procurement, security and IT together. Each owns different answers.
Should certifications be a hard requirement?
For many regulated buyers, yes. Ask what is certified today and what is on a dated roadmap.
Can we get Inova's answers in writing?
Yes. Request the security pack at team@inovasolutions.ai.
Liked this answer? The AI Glittch sends one like it every week to 3,500+ readers.Subscribe →
Book a consultation