Evaluate AI vendors for the security, data handling, and compliance risks that standard IT procurement reviews miss entirely — before the contract is signed, not after deployment.