How should our vendor management program scope MiOpsAI?

Scope MiOpsAI as an operational productivity vendor, not a core-adjacent one. The distinction matters because it dictates the risk classification, the due diligence depth, and the ongoing monitoring cadence your vendor management program applies.

The reason we belong in the operational-productivity bucket is that MiOpsAI never touches account data, transaction data, credit data, or any regulated data element that lives inside the core. We are functionally comparable to your email server, your CRM, your marketing automation platform, and your project tracker. Those tools carry customer contact information and business coordination content, and they get vendor-managed accordingly. MiOpsAI carries the same category of data and warrants the same treatment.

For the due diligence file, we can provide: our security controls documentation (encryption at rest and in transit, tenant isolation, access controls, incident response), the current SOC 2 status (working toward Type II on the 2026 roadmap, AWS infrastructure already SOC 2 Type II), business continuity documentation, our subprocessor list (SendGrid for delivery, OpenAI and Anthropic under enterprise contracts with zero-retention terms and no training on your data, AWS for hosting), and a data flow diagram showing what enters and leaves the tenant.

For ongoing monitoring, standard operational-vendor cadence works: annual questionnaire refresh, notice of material control changes, notice of incident, contract renewal review. We do not require the deeper cadence you would apply to a core provider or a payments processor because the risk surface is different.

If your regulator has recently pushed for stricter oversight of AI-using vendors specifically, we can walk your compliance and IT teams through the AI provider contracts, the data-flow guarantees, and the drafting-versus-decision boundary that keeps humans in the loop for anything material. See the security and compliance FAQ set for the current documentation set.