Who controls your AI supplier? OpenAI answers a question you should be asking
OpenAI said today its nonprofit will retain control of the company. Whatever you think of the outcome, the question applies to every vendor you depend on.
OpenAI announced today, 5 May 2025, that its nonprofit parent will retain control of the company, reversing a proposed restructuring after criticism, legal challenge and discussions with two state attorneys general.
The corporate governance of a Silicon Valley company is not usually an SME’s concern. This one is worth thirty seconds of attention, for a narrow reason.
Why a buyer should care at all
Because you are not buying a product. You are renting access to a capability that only exists while a particular company keeps offering it on particular terms.
If your invoice processing depends on a model, and the company behind that model is restructured, acquired or repositioned, your terms can change with it. Not maliciously — through ordinary corporate events that have nothing to do with you.
That is an unusual kind of dependency. A machine tool keeps working whoever owns the manufacturer.
The three questions this suggests
- Who owns the vendor I actually contract with? Often a reseller or integrator, not the model provider. Two layers, two sets of corporate risk.
- What happens to my data if they are acquired? Most contracts allow assignment to a successor. Read what yours says, once.
- How long would I have? If a service were discontinued, what notice are you owed and is that long enough to move? Thirty days is common and is not long enough for anything embedded in a process.
The proportionate response
Not avoiding AI. Not choosing vendors by their corporate structure, which would be a strange way to buy software.
Simply knowing. Write one line per AI-dependent process: what it needs, from whom, and what you would do for the six weeks it would take to switch. Most SMEs have two or three such processes, so this is a fifteen-minute exercise.
It is the same principle as the model-swap question from February and the connection standard from March. All three are versions of: do not let a process become unrunnable because a company you do not control changed its mind.