Course contents
Advanced · Course 5: AI Governance, Risk and Buying AI · Lesson 3 of 5

What to check before buying or adopting a new AI tool

Level: AdvancedTime: 45 minutesOrder used: A (the T-shirt)Tool: AI governance and risk checklist
For anyone who is about to buy or adopt a new AI tool for their own business and needs a working method for checking it first. Lessons 5.1 and 5.2 are useful background but not required. The case uses a domestic Make to Stock business alongside Order A's own approved master figures.
Domestic brandCedar & Co. (12 shops)
SupplierDelta Garments (open account)
Business modelMake to Stock, own forecast
Reference orderA — 15,000 T-shirts
Reference FOBUSD 3.20 per piece
Reference order valueUSD 48,000
02Opening

This page teaches what to check before a business buys or adopts a new AI tool, and who it is for

Omar, the owner of Cedar & Co., is offered an AI tool that promises to recommend how much stock to reorder each month from its own sales history. The offer sounds useful, and the risk is not obvious from a sales pitch alone. Before any business adopts a new AI tool, whether it recommends stock quantities, drafts replies, or reads specifications, someone needs to check a short, specific list of things: who owns the data it is fed, what happens if its recommendation is wrong, and whether a person reviews its output before it changes real stock, a real order or a real commitment.

This lesson mainly teaches the decision flow for evaluating a new AI tool before it is trusted with any of that. Without a check like this, a business adopts a tool on the strength of a demonstration, and finds out what it actually does only after it has already been used on real decisions.

03Before you start

What you need, and what this lesson does not cover

You need: Lesson 5.1's reasoning for why an AI-use policy exists and Lesson 5.2's picture of the risks an ungoverned tool creates. This lesson turns both into a concrete pre-purchase checklist.

By the end of this lesson you can:

  • list the three questions a business must answer before adopting any new AI tool;
  • explain why "who owns the data it is fed" matters as much as what the tool promises to do;
  • describe what should happen, by rule, if the tool's recommendation turns out to be wrong;
  • decide whether a proposed AI tool needs a human review step built around it before it is adopted;
  • recognise a vendor claim that needs independent checking rather than acceptance at face value.

Not covered here: writing the AI-use policy itself (Lesson 5.1) and assigning accountability after something has already gone wrong (Lesson 5.4).

04Key terms

Words you will meet in this lesson

TermMeaning
Data ownership checkConfirming who owns and controls the information an AI tool is fed, and what the vendor may do with it.
Failure planThe agreed answer to what happens, and who is told, if an AI tool's recommendation or output turns out to be wrong.
Vendor claimA statement a supplier makes about what its AI tool can do, which needs checking rather than automatic acceptance.
Pilot periodA limited trial of a new AI tool on a small, reversible decision before it is used on a larger or harder-to-reverse one.
ReversibilityWhether a decision made with an AI tool's help can be undone or corrected without lasting cost if the tool turns out to be wrong.
05Teaching
The rule

Before adopting a new AI tool, a business must check who owns the data it is fed, what the failure plan is if it is wrong, and whether a human reviews its output before it acts on a real decision

These three checks apply whether the AI tool drafts text, recommends a stock quantity, or reads a technical document. Data ownership matters because a vendor's own terms may allow it to keep or reuse information the business considers its own. A failure plan matters because every AI tool will eventually be wrong about something, and a business that has not decided what happens next will discover it in the middle of a real loss. A human review step matters because it is the point where a wrong recommendation is caught before it changes real stock, a real order or a real commitment.

A tool that fails any of these three checks is not automatically unusable, but it needs a stronger review step, a shorter pilot period, or both, before it is trusted with a decision that is hard to reverse.

Data ownershipWho owns and controlsthe information it is fedFailure planWhat happens, and who is told,if it is wrongHuman reviewBefore its outputchanges a real decision
A tool that fails one of the three checks is not automatically unusable. It needs a stronger review step or a shorter pilot before it touches a hard-to-reverse decision.
What you meet in real life

What the three checks reveal differs by business model, market and how reversible the decision is

What can differThe shapes you will meetWhy it matters to you
Export order under Make to OrderAn AI tool proposed for drafting buyer replies is fed real, confirmed order information.The data ownership check matters most here, since confirmed buyer information is exactly what must not leave the business under the vendor's own terms.
Domestic replenishment under Make to StockAn AI tool proposed for stock reorder recommendations is fed the business's own sales history and acts on a decision (how much to reorder) that is only partly reversible once stock is committed.Reversibility matters most here: a wrong reorder recommendation ties up real cash that is slow to recover, so a pilot period on a small product line is worth insisting on.
Hybrid order handled through a millAn AI tool proposed for material specification drafting is shared across more than one buyer's hybrid order.The failure plan must specify how far a wrong specification is checked back once found, since it may already be shared across more than one order.
Buying office or agent roleAn AI tool proposed to summarise messages from several buyers at once is fed information from all of them together.The data ownership check must confirm the tool does not let one buyer's information influence what is shown about another.
Different product familiesSocks, knit-to-garment, terry and home-textiles businesses proposing an AI tool for forecasting or specification work all face the same three checks; only the specific data at risk changes.The three checks apply the same way regardless of product family; only the detail behind each check changes.
The case we follow

Omar checks a stock-reorder AI tool before adopting it for Cedar & Co.

Cedar & Co. runs 12 shops on its own Make to Stock forecast, buying from Delta Garments on 60-day open account. Omar is offered an AI tool that promises to recommend a monthly reorder quantity for each product line from Cedar & Co.'s own sales history. Before agreeing, he checks the three things this lesson teaches.

On data ownership, Omar reads the vendor's terms and finds that Cedar & Co.'s own sales data remains its property and is not shared with other customers of the vendor, which passes the first check. On the failure plan, he asks the vendor directly what happens if a recommendation is wrong, and is told only that the tool "improves over time," which is not an answer to what happens on the order that was already wrong; he records this as a gap Cedar & Co. must cover itself. On human review, he decides that no reorder recommendation will be placed as an actual order until a member of his own planning team compares it against the current shop-level sales trend, at least for the tool's first three months of use.

Because the failure plan gap is real, Omar starts with a pilot on the shop's smallest product line rather than its highest-volume one, so a wrong recommendation in the pilot period costs little to correct.

The worked number

A wrong reorder recommendation during the pilot shows why reversibility and a pilot period matter, using Order A's own fixed figures as a reference point

Suppose the AI tool's first pilot recommendation for the trial product line overstates demand and Cedar & Co. reorders more stock than it can sell, tying up cash the business would rather have used elsewhere. As a reference for the scale of exposure a full-line rollout would represent, Order A's own fixed order value shows what a single export order already carries:

Order A total value (reference figure, not Cedar & Co.'s own order): USD 48,000
Pilot product line's own reorder value tied up by the wrong recommendation: a small fraction of a single line, not the full USD 48,000 exposure a wrong recommendation across every product line would represent

Running the pilot on the smallest line first is exactly what limits the cost of this kind of mistake: the wrong recommendation is caught and corrected on one small line, at low cost, before the same AI tool is trusted with a reorder decision across Cedar & Co.'s full range, where a similar error would tie up far more cash.

GOOD: pilot on smallest line firstA wrong recommendation ties up little cashCorrected cheaply before wider rolloutBAD: full range from day oneA wrong recommendation ties up cashacross every product line at once
A pilot period turns an unavoidable early mistake into a small, cheap one. The tool is still new; only the size of the first mistake is under Cedar & Co.'s control.
The method

Check a new AI tool before adopting it in four steps

  1. Read the vendor's own terms for what happens to the business's data once it is fed to the tool, and confirm it stays the business's own property.
  2. Ask the vendor directly what happens if the tool's recommendation is wrong, and record the answer in writing, even if the answer is incomplete.
  3. Decide where a human must review the tool's output before it changes a real decision, and for how long, before removing that step.
  4. Start with a pilot on the smallest, most reversible decision the tool would touch, before adopting it for a larger or harder-to-reverse one.
The trap

A common mistake is adopting an AI tool business-wide immediately because a demonstration looked convincing

A demonstration is built to show the tool working well, not to show what happens when its recommendation is wrong on the business's own real data. Adopting business-wide on the strength of a demonstration skips exactly the three checks that would have caught a data-ownership gap, an unclear failure plan, or a missing review step, and it does so at full scale from the first day.

The better rule is simple: run the three checks and a small pilot before any AI tool touches a decision the business would find hard or costly to reverse.

06In plain words

Before you let a new AI tool make or shape a real decision, ask it three plain questions: who keeps my information once I give it to you, what happens if you are wrong, and who checks your answer before it changes anything real. Then try the tool first on your smallest, easiest-to-fix decision, not your biggest one.

If the tool cannot answer the first two questions clearly, that is not a reason to refuse it outright; it is a reason to keep a person checking its work for longer before you trust it on its own.

07Quick check
  • Check data ownership, the failure plan, and the human-review step before adopting any new AI tool.
  • A vendor's demonstration shows the tool working well; it does not show what happens when it is wrong on your own data.
  • An unclear or missing failure plan is a gap the business itself must cover, not a detail to ignore.
  • Start with a pilot on the smallest, most reversible decision before a wider rollout.
  • The same three checks apply whether the tool drafts text, recommends a quantity, or reads a document.
  • A tool that fails one check is not automatically unusable; it needs a stronger review step or a shorter pilot first.
08Workplace scenario

A vendor asks Omar to sign a contract giving the AI tool access to Cedar & Co.'s full sales history before any pilot has been run

The vendor offering the stock-reorder AI tool asks Omar to sign a full-service contract immediately, covering all 12 shops and the business's complete sales history from the start, in exchange for a lower first-year price than a smaller pilot agreement would cost.

  • The contract's data clause allows the vendor to use aggregated, anonymised data from all its customers, including Cedar & Co., to improve the tool over time.
  • No pilot period is offered under the discounted full-service contract; the discount applies only to the immediate full rollout.
  • Cedar & Co.'s planning team has not yet used the tool on any real reorder decision.

Should Omar sign the discounted full-service contract as offered? Decide before opening the answer.

Show decision

No. Omar asks for a smaller pilot agreement on one product line first, even at a higher unit cost, before considering the full-service contract.

1. No pilot period means Cedar & Co. would adopt an unproven tool across all 12 shops from day one, exactly the exposure Lesson 5.3's method is meant to avoid. 2. The data clause allows aggregated use of Cedar & Co.'s own sales data, which is a real term to negotiate or accept knowingly, not to sign without reading. 3. A lower first-year price does not offset the cost of a wrong recommendation reaching every shop at once, since that cost could easily exceed the price difference between the two contract options.

The cost of signing the discounted full-service contract without a pilot is not the price difference itself; it is the exposure of finding out how the tool performs on real decisions only after it is already running across the whole business.

09What it costs

Checking an AI tool before adoption costs little against the cost of discovering its failure plan only after something goes wrong

Order A's fixed total order value remains a useful reference point for the scale of exposure any single AI-assisted decision in this trade can carry:

15,000 pieces × USD 3.20 per piece = USD 48,000 total FOB value

The three pre-adoption checks in this lesson cost a few hours of reading a contract, asking direct questions, and setting up a small pilot. What they protect against is discovering, only after the fact, that a vendor's data terms were unfavourable, that no one at the vendor could say what happens when the tool is wrong, or that a wrong recommendation was already applied business-wide before anyone reviewed it. Any one of these, discovered late, costs far more than the checks themselves ever would.

The cheapest point to catch a bad AI tool is before the contract is signed, not after the first wrong recommendation is acted on.

10Working template

AI governance and risk checklist: record the three pre-adoption checks for each AI tool under consideration

Use the T18-C05 AI governance and risk checklist workbook. In the AI tool evaluation sheet, list each AI tool under consideration, the answer to the data-ownership check, the answer to the failure-plan check, and whether a human-review step and a pilot period are planned before wider use. Start with Cedar & Co.'s own stock-reorder tool, then repeat the exercise for a tool your own business is considering.

[Download the AI governance and risk checklist workbook](../../templates/T18-C05-ai-governance-and-risk-checklist.xlsx)

Download the AI governance and risk checklist (Excel)

11Check yourself

1. Why does Omar start Cedar & Co.'s AI reorder tool on its smallest product line instead of its full range, given the vendor could not describe a clear failure plan?

2. A hybrid-order mill adopts an AI drafting tool business-wide immediately, based on a vendor demonstration, and later finds the vendor's contract allows the vendor to reuse the mill's specification drafts for its own product examples. Which pre-adoption check would have caught this before signing?

12Glossary
ENARFRTRMeaning
Data ownership checkفحص ملكية البياناتVérification de la propriété des donnéesVeri sahipliği kontrolüConfirming who owns and controls the information an AI tool is fed, and what the vendor may do with it.
Failure planخطة التعامل مع الخطأPlan en cas de défaillanceHata planıThe agreed answer to what happens, and who is told, if an AI tool's recommendation or output turns out to be wrong.
Vendor claimادعاء المورّدAffirmation du fournisseurTedarikçi iddiasıA statement a supplier makes about what its AI tool can do, which needs checking rather than automatic acceptance.
Pilot periodفترة تجريبيةPériode pilotePilot dönemiA limited trial of a new AI tool on a small, reversible decision before it is used on a larger or harder-to-reverse one.
Reversibilityإمكانية التراجعRéversibilitéGeri döndürülebilirlikWhether a decision made with an AI tool's help can be undone or corrected without lasting cost if the tool turns out to be wrong.
13Next

Lesson 5.4: Assigning who is accountable when AI-assisted work goes wrong

Next you will learn how to name one accountable person for a business decision, even when an AI tool helped produce it. Back to the course map

14Ladder

RecognizeName the three checks a business must run before adopting a new AI tool.
ConnectSee how reversibility decides which decision an AI tool should be piloted on first.
CompareSeparate a vendor's demonstration from what its own contract terms actually say.
DecideChoose whether to sign a full-service AI contract with no pilot period offered.