Articles

Writing on how AI governance works in practice. Every claim is sourced to a primary document and dated.

Robin Horstmann 10/12/26 Robin Horstmann 10/12/26

Treat the Release Note as a Third-Party Risk Event

A vendor can add an AI capability to software you already licensed, and nothing in the contract requires notice.

Corporate Compliance Insights published an edited version of this article on October 12, 2026.

Robin Horstmann 8/30/26 Robin Horstmann 8/30/26

Where Your AI Policy Stops Being True

A policy sentence about third-party AI training states an intention. Whether it is accurate may depend on documents the policy author did not write.

Most AI policies contain a version of this sentence. Company data will not be used to train or improve a third party's AI system without review and approval.