An AI procurement contract should identify what the service does, its limitations and the responsibilities retained by the customer. Data access, retention, training use, subcontractors and hosting arrangements can matter as much as the price. Output ownership wording alone does not eliminate third-party infringement risk. The relevant AI Act role and cooperation duties need to be considered alongside ordinary contractual remedies.
How we approach the matter
We review the use case, service description and supplier terms before negotiating performance criteria, acceptance testing, security, intellectual property provisions, audit evidence and exit arrangements. Changes to models or service behaviour should have a defined notice and approval process. Liability provisions must be tested against realistic failure scenarios, including inaccurate output and unavailable services.
From classification to operational controls
Describe the actual use case before selecting a compliance checklist: the inputs, outputs, decision-making process and affected people all matter. A supplier’s product category does not settle the customer’s legal role. Allocate responsibility for documentation, human review, transparency and incident escalation. Data protection, confidentiality, copyright and sector-specific rules continue to apply alongside the AI Act.
Procurement, change and evidence
Contracts should secure the information and assistance needed to operate the system lawfully. Assess how model updates, new data sources or a change of purpose will be reviewed. Keep a record of the approved use, limitations and relevant tests; this is more useful than a general statement that the product is compliant. If a concern arises, preserve the configuration and relevant input-output examples, subject to appropriate confidentiality and personal-data safeguards.
Four practical examples
The following scenarios illustrate typical legal questions. They are not descriptions of client mandates or promised outcomes.
Confidential prompts
A business wants assurances that client documents are not reused for training. We negotiate binding restrictions, retention limits and evidence of compliance.
Model replacement
A provider reserves the right to switch the underlying model. We define notification, testing and termination rights for material changes.
Output claim
A supplier offers an infringement indemnity with broad exclusions. We compare the protection with the customer’s intended use and responsibility for prompts.
Service exit
An organisation changes AI suppliers. We address export of relevant data, deletion, transition assistance and continued access to records.
Preparing your enquiry
A short description of the project or dispute, the parties involved, relevant countries and any deadline helps us identify the next step. Preserve the relevant contract, publication or technical records. Please avoid sending highly sensitive material until a suitable communication channel has been agreed.
Discuss your matter with our team · Media law overview · Disputes and enforcement