Your company is buying AI tools, drafting AI policies, and facing AI risks. As in-house counsel, you own the intersection of opportunity and liability. This book gives you a structured, repeatable method for vetting vendors, writing enforceable policies, and maintaining a living risk register that your board will understand. You will learn how to interrogate a vendor's data handling without legal boilerplate, how to negotiate contract terms that survive technical change, and how to map regulatory obligations—GDPR, AI Act, sector-specific rules—onto concrete internal controls. Every chapter builds toward one goal: defensible AI adoption that aligns with your company's risk appetite. You will find worked examples of vendor assessment matrices, policy clauses, and risk register entries, all framed as illustrations you can adapt. No hype, no horror stories, no advice to paste client data into a chatbot. Your professional obligations—confidentiality, privilege, duty of care—remain non-negotiable. You draft; you decide; you remain accountable. Part of The AI at Work Library.
About the author
Sophia Lund Alvarez writes for The AI at Work Library.
