Yes, at least one
No rule fires on this answer. A reviewer moves on.
Count anything you did not train yourself from nothing. If you call a vendor API such as OpenAI or Anthropic, run an open-weights model such as Llama on your own servers, or took someone else's model and fine-tuned it on your data, the answer is yes.
A carrier has to name every third party inside your product in its own examination response. It is not asking out of curiosity: it cannot describe its AI exposure without describing yours.
Each outcome below was produced by running Vaulith's rules engine on that answer. The same rules run in the paid assessment, on your whole estate, with the arithmetic shown.
No rule fires on this answer. A reviewer moves on.
No rule fires on this answer. A reviewer moves on.
The snapshot asks this and eight more, in about ninety seconds, with nothing leaving your browser, and returns every finding with its reasoning and its remediation.