AI vendor selection needs proof, data governance and implementation realism