Detecting AI in the Software Supply Chain | UpGuard

This UpGuard report examines how third‑party and fourth‑party AI services appear in software supply chains, describing methods used to detect AI usage (website script scanning, subprocessor disclosures, DNS verification) across 250 commonly monitored vendors. The analysis finds widespread reliance on a small set of AI providers—OpenAI is prominently disclosed as a data subprocessor—and recommends integrating detection and governance of AI fourth parties into Vendor Risk Management processes to reduce supply‑chain and privacy risks.