Jared Lukes. Start here

Who can you trust · Updated 2026-10-19

What are the red flags in an AI vendor?

Watch for a demo on their data instead of yours, a contract that lets them train on your data, a price that grows with usage and has no ceiling, no way to export what you put in, and nobody who can say what happens when the model is wrong. Any one of those is worth a hard question. Two of them is a reason to walk.

The red flags in an AI vendor show up in three places: the demo, the contract, and the bill. Here is what to look for in each, from someone who picks AI vendors for a living and has to answer for them.

What are the red flags in an AI vendor?

By where they show up:

  • In the demo. It runs on their sample data, not yours. It never shows a wrong answer. Nobody can say what it does when it is unsure.
  • In the contract. They can use your data to train their models. There is no clause about where the data is stored or who can see it. You cannot export your data in a format you can use elsewhere. Auto-renewal for a year or more.
  • In the price. Billed by usage with no cap and no alert. A low first-year price with the real price in the renewal. Required add-ons that only show up on the order form.
  • In the company. The tool is a thin layer on someone else's model, and the only thing they own is the login screen. The roadmap slide promises the feature you need "next quarter."

How do I test the demo?

Bring your own data. A handful of real examples from your business, including a couple of ugly ones. Ask them to run those live. Then ask what happens when it gets one wrong: who sees the mistake, and how does it get fixed?

A vendor who will not run your examples is selling you their best day.

What should be in the contract?

At minimum:

  1. Your data is not used to train their models without your written permission.
  2. You can export everything you put in, in a common format, at any time.
  3. Where the data is stored and who at the vendor can see it.
  4. What happens to your data when you cancel.
  5. A price cap, or an alert before usage passes a number you set.

If they will not put those in writing, they will not honor them either.

Is it a red flag if the vendor uses ChatGPT or Claude underneath?

No. Most AI tools run on one of a few big models. The question is what they add on top. If the answer is your data, your workflow, and support when it breaks, that can be worth paying for. If the answer is a nicer screen, you may be paying a markup on something you already have.

Who you can trust with AI advice covers the same question for consultants instead of vendors.

What should I not do?

Do not sign at the end of the demo. Do not let one excited department buy a tool with company data in it before someone reads the contract. And do not pick a vendor without a written list of what you need. Turning a strategy into vendor RFPs shows how to write one.

Reading AI vendor contracts and running the selection is part of a fractional seat. The fractional executive page has the levels, or bring one contract to a one-hour second opinion for $150. Start on the start form.

Answered by Jared Lukes, Minneapolis. Twenty-five years in brand, UX, and technology, currently holding fractional AI and technology seats at three companies. About Jared.

Quick answers

Should I let an AI vendor train on our data?
Not by default. If there is a good reason, get it in writing, limited to your account, with a way to turn it off.
How do I check where an AI vendor stores my data?
Ask for it in writing: the country, the cloud provider, and who at the vendor can access it. A good vendor has a one-page answer ready.
What is a reasonable contract length for a new AI tool?
Month to month, or a short first term. A year up front for a tool your team has never used is the vendor's risk moved onto you.
Can you review an AI vendor contract before I sign?
Yes. A one-hour second opinion is $150 and covers one contract and the questions to send back.
What if we already signed with a bad AI vendor?
Read the exit and export clauses first. Then get your data out before you tell them you are leaving.

More questions like this

Got a version of this question that is more specific?

A 30-minute call, no deck, no pitch. Tell me what is stuck and I will tell you straight if I can move it.