L2-M4 / lesson 2 of 2

Control pilots, contracts and supplier changes

The buyer prepares a controlled pilot and contract review.

10–15 min · 0/4 steps complete

Start here / A workplace decision

Procurement continues after signature

The buyer prepares a controlled pilot and contract review.

The vendor cannot explain whether inputs improve its model.

Before you read / Think it through

In “Procurement continues after signature”, what would you check or do first?

Pause and form your answer, then compare the reasoning. This reflection is not scored.

Compare the reasoning

Resolve processing, confidentiality and security questions before sharing data.

The ideas below give you a method for this decision. Then work through the rest of this case and try the decisions yourself.

Part 1 of 4 Learn the ideas

Choose a topic0 of 5 read

Data and security questions

Establish processing roles, retention and training use.

Review subprocessors, transfers and access controls.

In the workplace

A 'no training' promise does not settle retention or third-party access. Involve privacy and security specialists.

Remember this

Check deletion, export and incident arrangements.

The workplace case

YOUR CASE / AI INVENTORY AND PROCUREMENT

Procurement receives a renewal for an HR platform that has quietly enabled an AI screening feature. No system owner is recorded. The vendor offers only a generic compliance badge and cannot explain whether customer data is used for model improvement.

Quick reference / five key ideas

Data and security questions: Check deletion, export and incident arrangements.
Controlled pilots: Include users and people responsible for oversight.
Contract controls: Include exit, deletion and continuity arrangements.
Renewal and change: Update owners and disabled or retired status.
Exit and evidence: Retain relevant compliance evidence under a defined policy.