When companies and law firms purchase an AI tool from a vendor, they need to consider the risks and controls they can put in place to mitigate them. They will have no control over associated risks without proper contracts. “Your AI governance program cannot work unless the vendor agreement gives the rights needed to enforce that governance,” William Galkin, partner and founder of Galkin Law, LLC, said during a recent BARBRI program. This article synthesized insights from Galkin and technology executives at BillingNav and MorriganAI regarding risks from the use of third-party AI tools and considerations for approaching contracting with vendors. It also offered practical advice on six key AI vendor contract clauses to help companies transform an AI governance program from just policy statements into enforceable operational safeguards.