FISTA Solutions does not load Google Analytics until you accept. Rejecting keeps optional analytics off. Read the Cookie Policy.

All field notes

Leadership · 5 minute read

Red Flags in an AI Vendor Pitch

The clearest red flags in an AI vendor pitch are a single accuracy number with no evaluation set, reluctance to be tested on your cases, no named production customers doing what you need, vague answers on data use, and no exit path. Each has a question that exposes it in the meeting.

By FISTA Solutions· AI-Native Engineering Team·
Red Flags in an AI Vendor Pitch article cover

AI vendor pitches follow recognizable patterns, and so do the problems they conceal. This guide gives twelve red flags, what each usually indicates, and the question that surfaces it while you are still in the room.

The twelve red flags

Red flagWhat it usually concealsQuestion that exposes it
A single accuracy numberNo real evaluation practice"On what set, how many cases, labeled by whom, when?"
Reluctance to be tested on your casesThe demo is the product"Can you run this on fifty of our real cases next week?"
No named production customers doing what you needYou would be the first"Who is doing exactly this, at what volume, for how long?"
Vague data-use answersTerms you will not like"What does the contract say about training, retention, and regions?"
No answer on model changesThin product; disruption passed to you"What happened the last time a provider deprecated a model?"
Demo only on clean inputsFails on real messiness"Show me it on a bad scan and an ambiguous case"
No permission modelSecurity review will block it"What can it read and write, and how is that scoped per user?"
Claims of learning from your usageEither untrue or a data-use issue"What exactly is stored, where, and can we delete it?"
No mention of human review or exceptionsException burden lands on you"What share of cases will my team still handle, and how do they arrive?"
Pricing that hides usageCost surprise at scale"What is cost per task at our volume, and at three times it?"
No exit pathDeliberate lock-in"Walk me through a migration away from you"
Pressure to buy before evaluatingConfidence in the pitch, not the product"We will decide after the evaluation; is that acceptable?"

Why is evaluation refusal the strongest signal?

Because every other issue can be investigated afterward, and this one cannot be worked around. A vendor whose system performs well on real cases has an incentive to be tested: it differentiates them from competitors selling demos. A vendor who deflects ("our benchmarks show," "that would require a paid pilot," "our other customers are satisfied") is protecting a gap.

The request is reasonable and should be standard: fifty to a hundred of your real cases with known correct outcomes, run by them or by you, with results reported by pass rate and failure type. The how executives should evaluate an AI demo guide covers converting a pitch into an evaluation.

Why do accuracy claims dissolve under questioning?

Because most are produced on curated sets by the vendor's own team with no defined threshold. Ask the five questions in the table and the number usually becomes "we don't have that broken down." That is not necessarily disqualifying, but it means the claim was never evidence. The how to read an AI evaluation report guide covers what real evidence looks like.

Why does the model-change question matter?

Because it reveals how much product exists around the model. A vendor with real engineering has been through a deprecation, has evaluation sets, revalidated, and notified customers. A thin wrapper experiences provider changes as an outage and passes the disruption downstream. Ask what happened the last time, specifically. The model deprecation risk management guide covers what good handling looks like.

What about the exception question?

Most AI products handle a portion of cases and route the rest. The portion is the value, and the routing determines the burden. A vendor who has not addressed exceptions has left the operational work with you and has not counted it in the business case. Ask what share of cases the buyer's team will still handle, in what form they arrive, and what context is included. The document AI explained for executives piece covers why exception design determines whether the system reduces work.

Are any of these disqualifying on their own?

Evaluation refusal and evasion on data use, usually yes. The rest are signals to investigate: a young vendor may have no named customers doing exactly this and still be the right choice with appropriate terms and a pilot structured as a real evaluation. The purpose of the list is to know what you are accepting rather than to eliminate candidates automatically.

What should buyers do with the answers?

Put the important ones in the contract: data use, model change notification, accuracy commitments where offered, exception volumes, exit assistance, and export formats. Statements made in a pitch have no force; the same statements in a contract do. The how to sunset an AI vendor guide covers the exit terms specifically.

What should executives ask?

  • Will you run this on our cases, and when?
  • What set produced your accuracy figure, and who labeled it?
  • Who is doing exactly this in production, and may we speak to them?
  • What does the contract say about our data?
  • How would we migrate away from you?

How can FISTA Solutions help?

FISTA Solutions runs independent evaluations of vendor systems on clients' own cases, assesses model dependency, exception burden, and exit terms, and builds the alternative where a build is the better answer, through its AI enablement and AI agents practices. Since 2017, FISTA has delivered 150+ projects for 50+ companies across 12+ countries.

To have a vendor's claims tested on your own cases before you sign, talk to FISTA on WhatsApp, or read how to evaluate AI vendors.

Share-ready article cover

Download the generated social format.

Download cover

Clear answers

Questions raised by this field note.

Straightforward guidance for evaluating scope, fit, and the next step.

01What is the biggest red flag in an AI vendor pitch?

Reluctance to run the system on your own cases with known correct answers. Every other concern can be investigated; a vendor who will not be evaluated is telling you the demo is the product. Confident vendors welcome the test because it differentiates them.

02How should you treat vendor accuracy claims?

As a starting question rather than information. Ask what set the number came from, how many cases, who labeled them, whether hard cases were included, when it was measured, and what threshold it was measured against. Most single accuracy figures dissolve under these questions.

03What should you ask about a vendor's model dependency?

Which models they use, what happens when a provider deprecates or changes one, whether customers are notified of model changes, and whether the product has been revalidated after past changes. A vendor without a clear answer will pass the disruption to you.

04What data-use answers should worry a buyer?

Anything vague: "we take privacy seriously," "data is secure," or "we may use aggregated data to improve the service" without definition. Get specifics on training use, retention, regions, subprocessors, and deletion, in the contract rather than in the deck.

05Is lack of an exit path a red flag?

Yes, and a deliberate one. Vendors know whether their customers can leave. Ask directly how a migration away would work, what exports are available in what formats, and what exit assistance is contractual. Evasion here predicts the experience later.

Start with the hard problem

Need the outcome owned, not merely analyzed?

Tell us where delivery is constrained. We’ll map the fastest credible path from intent to verified production.

Start a project