The McHire Post-Mortem: A Vendor-Risk Playbook for Hospitality AI

The Paradox.ai breach is the canary, not the bird. Here is the contract language every multi-unit operator should require from any AI vendor — pen-test schedules, IDOR testing, SOC2 expectations, training-data clauses, and incident-response SLAs.