Jared Lukes. Start here

Who can you trust · Updated 2026-10-22

What are the red flags in an AI vendor?

Watch for a demo on their data instead of yours, a contract that lets them train on your data, a price that grows with usage and has no ceiling, no way to export what you put in, and nobody who can say what happens when the model is wrong. Any one of those deserves a hard question. Two of them is a reason to walk.

The red flags in an AI vendor show up in the demo, the contract, and the bill. I pick AI vendors for clients and have to answer for them, and these are what I look for.

What are the red flags in an AI vendor?

By where they show up:

  • In the demo. It runs on their sample data, not yours. It never shows a wrong answer. Nobody can say what it does when it is unsure.
  • In the contract. They can use your data to train their models. Nothing says where the data is stored or who can see it. You cannot export your data in a format you can use elsewhere. It auto-renews for a year or more.
  • In the price. Billed by usage with no cap and no alert. A low first-year price with the real price in the renewal. Required add-ons that first appear on the order form.
  • In the company. The tool is a thin layer on someone else's model, and all they own is the login screen. The roadmap slide promises the feature you need "next quarter."

How do I test the demo?

Bring your own data: a handful of real examples from your business, including a couple of ugly ones. Ask them to run those live. Then ask what happens when it gets one wrong. Who sees the mistake, and how does it get fixed?

A vendor who will not run your examples is selling you their best day.

What should be in the contract?

At minimum:

  1. Your data is not used to train their models without your written permission.
  2. You can export everything you put in, in a common format, at any time.
  3. Where the data is stored and who at the vendor can see it.
  4. What happens to your data when you cancel.
  5. A price cap, or an alert before usage passes a number you set.

If they will not put those in writing, do not expect them to honor them.

Is it a red flag if the vendor uses ChatGPT or Claude underneath?

No. Most AI tools run on one of a few big models. Ask what they add on top. If it is your data, your workflow, and support when it breaks, that can be worth paying for. If it is a nicer screen, you may be paying a markup on something you already have.

Who you can trust with AI advice covers the same question for consultants.

What should I not do?

Do not sign at the end of the demo. Do not let one excited department buy a tool with company data in it before someone reads the contract. And do not pick a vendor without a written list of what you need. Turning a strategy into vendor RFPs shows how to write one.

Reading AI vendor contracts and running the selection is part of a fractional seat. The fractional Chief AI Officer page has the levels, or bring one contract to a one-hour second opinion for $150. Send it through the start form.

Answered by Jared Lukes, Minneapolis. Twenty-five years in brand, UX, and technology, currently holding fractional AI and technology seats at three companies. About Jared.

Quick answers

Should I let an AI vendor train on our data?
Not by default. If there is a good reason, get it in writing, limited to your account, with a way to turn it off.
How do I check where an AI vendor stores my data?
Ask for it in writing: the country, the cloud provider, and who at the vendor can access it. A good vendor has a one-page answer ready.
What is a reasonable contract length for a new AI tool?
Month to month, or a short first term. A year up front for a tool your team has never used moves the vendor's risk onto you.
Can you review an AI vendor contract before I sign?
Yes. A one-hour second opinion is $150 and covers one contract and the questions to send back.
What if we already signed with a bad AI vendor?
Read the exit and export clauses first. Then get your data out before you tell them you are leaving.

More questions like this

Got a more specific version of this question?

Ask me. Thirty minutes on the phone, and you will know whether I can help.