The AI risk you already signed for

Heads up: this one’s an ad.

Your best CSMs block an hour before the strategic QBR. They pull NPS trends, dig through support history, check adoption deltas, draft the deck. The customer feels seen.

The other 190 QBRs this quarter don't get that hour. The CSM scans the dashboard five minutes before the call. The customer answers the same baseline questions again.

Viktor changes that ratio. Before any QBR, message Viktor. He pulls account health, open tickets, product usage, and recent company news. Drafts the brief. Attaches the deck. Posts it in your DMs before the day starts.

Every CSM walks into every QBR prepared. Even when there are 200 of them.

20,000+ teams. Connects to Gainsight, Zendesk, Salesforce, and 3,000+ other tools. SOC 2 certified.

Get Started for Free

I was reviewing a new client's AI use policy last month when I spotted a gap. The policy covered what their team could do with ChatGPT, down to the tool. It said nothing about the 5 SaaS platforms they run every day, several with AI features switched on, quietly processing company data under contracts nobody had opened since signing.

The document written to govern AI risk was pointed at the smallest piece of it. That's the pattern I keep finding. The AI exposure that lands on your executive's desk usually lives in a vendor contract you signed months ago and never reopened.

For that client, I had AI read the contracts for me. I pulled the AI and data sections from their top 5 vendor agreements into a chat and asked it to flag, in plain language, every clause about how the vendor can use and retain company data, with the exact wording quoted.

In 10 minutes, I had a list: 2 vendors reserved the right to use customer data to improve their models, 1 used customer metadata to train its features by default, and 2 were clean. Then I nearly made the mistake that matters here. The summary read so cleanly I almost sent it on without checking.

AI can misread legal language, so I went back and matched every flag to the exact clause before it reached the client. That verification step is the job. The prompt below is what I use to start it.

The full vendor contract audit prompt is for CoS Signal members, along with the prompt library and everything else members get. Founding rate is locked at $14.99/month or $99/year.

The EU AI Act's high-risk obligations take effect on August 2, 2026. If your company deploys a vendor's AI in a high-stakes area like hiring or credit decisions, some of those obligations can fall on you as the deployer, not just the vendor. Knowing what your vendors' AI does is becoming part of the compliance baseline.

Heads up: this one’s an ad.

Ready to transform artificial intelligence from a buzzword into your personal revenue generator?

HubSpot’s groundbreaking guide "200+ AI-Powered Income Ideas" is your gateway to financial innovation in the digital age.

Inside you'll discover:

Download your guide today and unlock a future where artificial intelligence powers your success. Your next income stream is waiting.

Get Your Guide

Where to read this: your vendors' Trust Center. Many major SaaS platforms now publish a Trust or Privacy Principles page with an AI and data section. Slack's Privacy Principles spell out what they train on and how to opt out. Start with your top vendor, find their equivalent page, and read the AI section before you renew.

Next week, Part 2: the fix. How to turn this into a 20-minute vendor AI review you run before every renewal. The AI risk you'll answer for is already signed and sitting in a drawer. This week, go read it.

Reply and tell me which vendor you'd check first. I'm collecting the messiest AI clauses for Part 2.