Third-party AI risk: the vendor questions CX must ask (before procurement signs)