# SPM-006: Discover AI embedded in sanctioned SaaS


- Area: AI Security Posture Management

- Verification: Live test
- OWASP adoption tier: AT0, AT4
- Formerly: DIS-010
- URL: /r/SPM-006

**Acceptance criteria:** Identify AI features inside existing SaaS tools, such as Google AI Mode.

**Why it matters:** AI features switched on inside approved SaaS create new data flows without a new application to approve.

**How to verify:** A common SaaS application is identified and cataloged as an AI tool due to its embedded AI features.

**OWASP adoption context:** Vendor-embedded and platform-integrated AI can be present inside already approved SaaS, so discovering the host application alone is insufficient.

**Mappings:**
- NIST CSF 2.0: ID.AM-02, ID.AM-04; ISO 27001: A.5.9, A.5.22 — Discovery of AI features within existing SaaS supplies updates to the software and service inventory and flags supplier-service changes. A discovery finding must feed maintained records and does not itself complete change review.
- NIST AI RMF: MAP 4.1 — Identifying embedded AI makes new third-party components and supplier capabilities visible for risk mapping and supplier governance. Existing SaaS approval does not assess the newly discovered AI feature.
- SOC 2: CC2.1, CC9.2 — Embedded-feature findings keep control information and the supplier-risk picture current. The buyer still needs to review the feature and decide its permitted use.
- ISO 42001: A.4.2 — Discovering an embedded SaaS AI feature identifies an AI resource or component for the resource record. Existing SaaS approval does not establish assessment of that newly discovered feature.