How AI Agents Will Negotiate Your Vendor Contracts

About this episode

The episode discusses how AI is transforming Third-Party Risk Management and the future of vendor contracts.

Third-Party Risk Management (TPRM) has historically been a tedious, 200-page paper exercise that felt like being catapulted back to 1979. But AI is changing that. In this episode, Ashish sits down with Igor Andriushchenko (CISO at Lovable) and Jasper Mills (CEO of Ethira) to discuss the collision of TPRM and AI. We dive into the hidden risks of Shadow AI, exploring the chaos that ensues when non-technical teams spin up unauthorized AI tools without security oversight. Jasper and Igor explain why the future of vendor risk involves treating AI agents like a contracted workforce, managing their lifecycles, and preparing for the 2027 era of "agent-to-agent" negotiations where humans are entirely removed from the loop. We also cover the impact of DORA (Digital Operational Resilience Act) regulations, the Build vs. Buy debate for AI security tooling, and how to use autonomous agents to finally automate tedious vendor questionnaires. Guest Socials -⁠⁠ ⁠⁠Igor's Linkedin + Jasper Linkedin Podcast Twitter…

People in this episode

Host: Ashish

Guests: Igor Andriushchenko, Jasper Mills

Topics covered

• Third-Party Risk Management
• AI
• Vendor Contracts
• Shadow AI
• Digital Operational Resilience Act
• Autonomous Agents

Keywords

• AI Agents
• Vendor Risk
• TPRM
• Shadow AI
• DORA
• Autonomous Agents
• Agent-to-Agent Negotiations

Mentioned in this episode

Organizations: Lovable, Ethira, DORA

More episodes of Cloud Security Podcast

• Native Cloud Firewalls Falling Short in a Multicloud World · June 11, 2026 · 37 min
• How Claude Mythos Changes Vulnerability Management: From CVSS to Exploitability · May 5, 2026 · 45 min
• AISPM Isn't Enough: How to Apply Zero Trust to AI Agents · April 29, 2026 · 54 min
• The Rise of Agentic Cloud Security: Code-to-Cloud Shrinks to 3 Days · April 21, 2026 · 27 min
• Why EDR Fails at AI Security & The Rise of Endpoint Behavior Modeling · April 14, 2026 · 31 min
• Solving Prompt Injection & Shadow AI for AI Malware · April 7, 2026 · 37 min