AI is no longer something “coming soon.”
It’s already being embedded into the systems you use every day.
ERP platforms. Quality systems. Document management tools.
Vendors are rapidly adding AI features to stay competitive.
And here’s the problem:
Most software vendors do not understand FDA regulatory requirements.
The Risk No One Is Talking About
I’m seeing more and more vendors say things like:
“We’re working toward compliance.”
“AI features are optional.”
“We’ll validate it later.”
That should stop you in your tracks.
Because in a regulated environment, “working toward compliance” is not compliant.
Here’s the Reality
If you are using a system in a regulated process:
- You are responsible for validation
- You are responsible for data integrity
- You are responsible for audit readiness
Not the vendor.
Not the software company.
You.
Why AI Changes the Game
Traditional software behaves predictably.
AI does not.
AI systems can:
- Produce different outputs from the same input
- Change behavior based on new data
- Operate in ways that are not fully transparent
That creates a serious challenge for:
- Validation
- Traceability
- Change control
And yet—these tools are being dropped into regulated environments anyway.
The Quiet Compliance Gap
What’s happening right now is a growing gap:
- Companies think they are modernizing
- Vendors think they are innovating
- But compliance is being left behind
And most teams don’t even realize the exposure.
What You Should Be Asking
Before adopting or enabling any AI feature, you should be asking:
- How is this validated?
- Can outputs be explained and traced?
- What data is the model trained on?
- How are changes controlled over time?
If you’re not getting clear answers, that’s a red flag.
What I’m Working On
I’m currently putting together a practical AI Compliance Evaluation Checklist
to help teams assess risk before adopting AI tools.
Something simple. Direct. Usable in real decisions.
If this is something you’d find helpful, let me know—I’ll share it when it’s ready.
Closing
AI has real potential in regulated industries.
But only if we apply the same rigor we expect everywhere else.
Right now, that’s not happening.