Compliance

AI vendor lock-in: how to avoid it

AI vendor lock-in is the most expensive problem you do not discover until it is too late. The time to address it is before you sign, not after the system is live.

By Zakir Hoosen, Director, Fuzzelogic Solutions. Board-level guidance in plain English.

AI vendor lock-in happens when you cannot change your supplier without rebuilding the system, losing your data, or spending more than the original project cost. It is a business risk, not a technical one. The board owns it.

Most lock-in is invisible at the point of sale. The demo looks impressive. The price looks competitive. The contract looks standard. It is only after you have built processes around the system, trained your people, and fed it your data that you find out the exit door has a price tag.

This guide tells you what to check before you sign, the five questions that expose a bad deal, and what good looks like.

How lock-in actually happens

Vendor lock-in is not a trick. It is a business model. The vendor wants to make it easy to start and hard to leave. That is rational for them, and it is expensive for you.

There are four common ways it shows up.

1. Data lock-in. Your data is stored in a format you cannot extract, or the vendor charges a fee to export it. You own the data in theory. In practice, you cannot get to it.
2. Integration lock-in. The system connects to your other tools using a method only the vendor supports. Changing the vendor means rewiring everything it touches.
3. Process lock-in. Your team has built workflows around the system. The people, the training, and the habits are all tied to one way of doing things. Changing vendors means starting the change process again.
4. Contract lock-in. The agreement has minimum terms, early termination fees, or conditions that make leaving more expensive than staying, even when the service is poor.

Each of these is a choice, not an inevitability. The time to address them is before you sign.

The five questions to ask the vendor

When a vendor presents an AI system, the demo is the least important part of the conversation. Ask these five questions instead.

First, can I get my data out? Not in theory. In practice. Ask for the export format, the process, and any cost. If the answer is vague, that is your answer.

Second, who owns the model? If the vendor trained a model on your data, who owns it? Can you take it with you? If the answer is no, your data has created value you do not control.

Third, what happens if you go bust? This is not rude. It is fiduciary. Ask what happens to your data and your system if the vendor ceases to trade. A good vendor has an answer. A bad vendor looks uncomfortable.

Fourth, what are the switching costs? Ask the vendor to estimate what it would cost to move to a competitor. If they cannot or will not answer, assume the cost is high.

Fifth, what is the total cost over five years? Not the year-one price. The five-year cost, including support, upgrades, data export, and any price increases. Most vendors will not volunteer this. Ask anyway.

A significant number of AI projects will not survive to maturity. If you cannot exit the vendor relationship cleanly, you are stuck with a system you do not want and a contract you cannot leave.

What good looks like

A vendor that is not trying to lock you in will do four things.

First, they will offer data export as a standard feature, not an add-on. You should be able to get your data in a common format, without a lengthy negotiation, at any point during the contract.

Second, they will use open standards for integration. If the system talks to your other tools through methods the industry recognises, you can replace the vendor without replacing everything else.

Third, they will write short contracts with clear exit terms. If a vendor is confident in their service, they do not need a long lock-in period to keep you.

Fourth, they will tell you honestly what it would take to replace them. That is a sign of a vendor who believes in their value, not one who relies on your inability to leave.

The board's role

This is not a procurement decision. It is a governance decision. The board needs to understand the switching cost before the contract is signed, not after the relationship breaks down.

A board that rushes the vendor decision because the technology looks exciting will pay for it later. The time to ask the difficult questions is in the room, before the contract is signed, when the vendor still wants your business.

If your organisation does not have governance over AI procurement, vendor lock-in is one of the first risks that will bite.

The Fuzzelogic approach

Fuzzelogic works with a definition of AI-ready that includes being changeable. If a system cannot be changed when the business changes, it is not ready. That applies to the system itself and to the vendor relationship around it.

1. Reachable. Can the data the AI needs actually be found when it needs it?
2. Trustworthy. Do you know the data is accurate, current, and complete?
3. Explainable. Can someone explain why the system made a particular decision?
4. Changeable. Can the system be changed when the business changes? This is where lock-in lives.
5. Governed. Has someone decided what the system may and may not do?

Test number four is the one most boards skip. It is the one that costs the most when you get it wrong.

The honest version

This is opinion. Most vendor lock-in is not deliberate cruelty. It is the natural result of a vendor optimising for growth and a buyer optimising for speed. The vendor wants to make it easy to start. The buyer wants to get moving. Both skip the hard conversation about what happens when things change.

The boards that avoid lock-in are the ones that treat the vendor conversation with the same rigour they would apply to any significant business decision. They ask the questions, they read the contract, and they plan the exit before they need one.

Fuzzelogic is an Isle of Man firm that has spent nineteen years modernising banking, insurance, healthcare, retail, manufacturing, and government platforms. We have seen what happens when vendor decisions go wrong. We help boards ask the right questions before they sign.

What to do next

Start with the assessment. Two to four weeks, fixed price, and you own the verdict and the roadmap whether or not we build any of it. When you are ready to talk AI, call Fuzzelogic Solutions and ask for Zak. www.FuzzelogicSolutions.com | info@FuzzelogicSolutions.com | +44 (0)1624 618950

For the fuller picture, read The EU AI Act in plain English next, then AI compliance in the Isle of Man. The full library is on our index. Our site explains how Fuzzelogic approaches AI for business. You can reach Zak directly via our contact page.