Article · AI-Native Government
The vendor problem: governing the AI you buy, not build
Most government AI is purchased, which means your accountability is only as strong as your contract. Five things to require before you buy, so the proof comes with you.
Most government AI is bought, not built.
Which means your accountability is only as strong as your contract. If the proof lives inside a vendor's platform you cannot query, you have inherited a black box you remain publicly responsible for.
Vendor opacity does not transfer the risk. It just hides it until someone asks.
Five things to require before you buy
- Transparency into what the system does and how.
- Audit access you can exercise on your own schedule — not a report the vendor generates when it suits them.
- Explainability for any decision that affects a person.
- Ownership of your data and your records.
- Portability, so the proof, the rules, and the receipts come with you if you leave.
A great audit log inside a vendor you cannot leave is still a walled garden. The question is never just "is it logged" — it is "whose proof is it, and can you take it with you."
When the same workflow can answer the four questions on your terms, you have governed the buy. Until then, you have rented exposure.