When companies and law firms purchase an AI tool from a vendor, they need to consider the risks and controls they can put in place to mitigate them. They will have no control over associated risks unless their contracts with those vendors provide such rights. “Your AI governance program cannot work unless the vendor agreement gives the rights needed to enforce that governance,” William Galkin, partner and founder of Galkin Law, LLC, said during a recent program from Strafford (now part of BARBRI). This article synthesizes insights from Galkin and technology executives at BillingNav and MorriganAI regarding risks from use of third-party AI tools and considerations for approaching contracting with vendors. It also offers practical advice on six key AI vendor contract clauses to help companies transform an AI governance program from policy statements into enforceable operational safeguards. See “Risk and Compliance Survey Highlights the Role of Compliance in AI Governance” (Oct. 22, 2025).