E&O Loss Control Articles

Vendor Due Diligence Questions

Written by Utica National Insurance Group E&O Risk Management | Aug 7, 2026, 2:13:51 PM

Before adopting an AI transcription platform, agencies should consider asking vendors:

    • Where are recordings, transcripts, and summaries stored?
    • How long is data retained, and can retention periods be customized?
    • Is customer data used to train AI models or improve the vendor’s products?
    • Are recordings, transcripts, or voiceprints shared with third parties?
    • What security controls, encryption standards, and access controls are in place?
    • Can data be permanently deleted upon request?
    • Does the platform create or store voiceprints or other biometric information?
    • What consent and notification features are built into the product?
    • Can recordings or transcripts be restricted to specific users or groups?
    • How are data breaches, security incidents, or unauthorized access handled?
    • What contractual commitments does the vendor make regarding confidentiality and data ownership?

View Fillable AI Transcription Platforms Vendor Due Diligence Checklist Here