AI Vendor Risk Lookup

Evidence basis: This is a review of linked public documentation, not an independent vendor audit. Audit and certificate summaries are vendor-reported; reports, certificate scope, contracts and customer settings were not independently examined. Missing evidence is unresolved, not proof that a control or certification is absent. HIPAA and GDPR are legal regimes, not certification badges.

Risk levelsare Ayliea's qualitative triage opinions for the stated deployment scope, not measured residual-risk scores or vendor rankings. Low describes a bounded use with limited sensitive access; medium requires managed configuration and use-case review; high reflects broad code/tool access, sensitive recording, trace collection or public-content exposure; critical would require a documented reason to block the proposed use. Certifications alone do not determine a rating.

Recommended policies: Approve means only the reviewed scope and permitted data classes; monitor means allow that scope with oversight after prerequisites are met; restrict means limit roles, data and features pending explicit review; block means deny the proposed use unless an assessed exception applies. These are starting points, not procurement approval. Personal, business, API and self-hosted deployments can differ substantially.

Retention and location:No training does not mean no storage. Provider ZDR does not delete application history, files, traces or backups. Storage residency does not automatically constrain inference, support or external tools. Read each entry's conditions and verify the actual configuration.

Disclosure: Ayliea provides independent AI risk assessments and competes in this space. We benefit when organizations take vendor risk seriously. Each vendor entry cites the primary documentation we used; click through and verify yourself before making procurement decisions.

Currency: Vendor postures change. Each entry shows its public-source research date. Recheck current terms before procurement, sensitive-data use or a material product change; this date is not an audit date or a guarantee of currency. Spotted an inaccuracy or recent change? research@ayliea.com.