There's a New Question AI Vendors Ask Before They'll Even Quote You

There was a period, not long ago, where buying an AI tool worked the same way as buying almost any other piece of software: pick a plan, enter a card number, start using it that afternoon. No real friction, no real questions asked beyond "how many seats do you need."

That's quietly changing, and the direction it's changing in is worth understanding — because it's actually a sign the market is growing up, not a sign of more sales friction for its own sake.

What's actually different now

In short: vendors selling AI that can take real actions are increasingly asking buyers about governance before closing a deal — how the AI's decisions will be reviewed, logged, and overridden — not just how many seats are needed.

More vendors selling AI that actually does things — not just answers questions, but takes actions, sends messages, makes decisions — are starting the sales conversation with questions about governance. How will this agent's decisions be reviewed? Who gets notified when it does something unusual? Is there a log of what it did and why? Can a person override it mid-task, not just turn it off entirely?

That's a meaningfully different conversation than "how many seats." It's the vendor checking whether a buyer is actually ready to run something that acts on its own, before handing over something that can.

Why this is a good sign, not a red flag

In short: a vendor asking hard governance questions is doing real underwriting on whether this will actually work safely in your business — the ones who never ask are the ones who let you find out the hard way.

It's tempting to read this as more hoops to jump through, and some of it genuinely is friction. But the underlying reason is worth sitting with: a vendor asking these questions is doing real underwriting on whether this is going to work safely in your specific business, the same way a lender asks real questions before a loan instead of just taking the application fee. The vendors who never ask anything like this aren't being more customer-friendly. They're skipping a step that matters, and leaving you to discover why it mattered the first time something goes wrong with no review process in place to catch it.

Buyers are starting to notice this too. A vendor's own governance posture — how seriously they treat this question, not just whether they ask it — is becoming part of how businesses evaluate who to work with, not an afterthought bolted onto the pitch deck.

What to actually ask, if nobody asks you first

In short: if a vendor doesn't bring up governance unprompted, ask directly how their AI's actions get reviewed, logged, and overridden before you sign anything that acts on your business's behalf.

If you're evaluating a tool and nobody on the vendor's side brings this up, that's worth noticing — and worth asking yourself, directly. Three questions cover most of what matters: What happens when this tool does something wrong — is there a log, and does a person see it? Can someone on your team step in mid-task, or only turn the whole thing off? And what, specifically, is this tool allowed to do on its own without anyone reviewing it first? If a vendor can't answer those clearly, that's more informative than almost anything in their pitch deck.

Where this actually matters most

In short: governance questions matter most for anything that acts on your business's behalf without a person in the loop every time — customer messages, scheduling, anything touching money — and matter far less for tools that only draft something for a person to review.

This isn't equally urgent everywhere. A tool that drafts something for a person to review before it goes out carries real but limited exposure — a bad draft gets caught before it does damage. A tool that sends a message, books something, or makes a decision on its own, without a person in the loop every single time, is a different category entirely, and it's exactly where these governance questions earn their keep. If you're evaluating anything that falls into that second category — touching customer communication, scheduling, or money without a human checking every instance — this is the conversation worth having before you sign, not after something's already gone out the door on its own.