Evaluating AI Tools and Vendors

Led by: Jae Yeon Kim & James Saunders

This session examines the questions public officials should ask before adopting AI-enabled products and services, including how vendors handle data, manage security and access, use information for model training, and respond to security incidents. Participants will learn what to look for when evaluating vendor practices and contractual protections and how to identify potential risks before committing to a tool.

By the end of this workshop, participants will be able to:

Identify key security and data protection questions to ask when evaluating AI-enabled products and vendors.
Assess vendor practices related to data handling, access permissions, model training, and security incidents.
Recognize potential risks and contractual protections to consider before adopting an AI-enabled tool or service.