When a large company uses AI to check its suppliers and other partners, should those partners be told that they are being checked and that AI is involved? Should they have the right to know why they were flagged and to challenge the result?