Who holds the controls? AI service control review · Enterprise Agentic AI Insights
A browser review that turns one AI-service proposal into named duties, evidence requests and a brief. It does not certify compliance or authorize deployment.
A local server, or a file of downloadable weights, does not settle who holds the controls. This review keeps three decisions apart. Sovereignty is authority and jurisdiction. Openness is rights and the materials you can actually obtain. Management is who operates the service. Work one proposal, not a vendor shortlist. Ten steps. Eight control areas: data boundary, keys and access, model rights, updates and retirement, platform authority, operations and recovery, evidence access, and exit and portability. You name who holds each right, what evidence you have reviewed, and what is still a gap. Then you download a review brief. It runs in the browser. Nothing is uploaded or saved automatically. Use reference IDs, not sensitive records. “Evidence reviewed” is your attestation. The tool does not inspect a provider, score readiness, certify compliance, or authorize deployment. The questions follow the Open Source AI Definition 1.0, the Amazon Bedrock model lifecycle, and Microsoft Foundry model retirements. Those pages were checked on 24 September 2026. No retirement date is hard-coded. The owners of the workload still set the controls that apply. Open the review below, or in a new tab if you want to print the brief.