Many SaaS companies claim their "system of record" status is a moat. However, this argument is increasingly flimsy. Customer data is not owned by the SaaS provider, and modern AI tools can easily migrate vast amounts of data, significantly reducing the friction and cost of switching vendors.

In an era of opaque AI models, traditional contractual lock-ins are failing. The new retention moat is trust, which requires radical transparency about data sources, AI methodologies, and performance limitations. Customers will not pay long-term for "black box" risks they cannot understand or mitigate.

In an AI-driven ecosystem, data and content need to be fluidly accessible to various systems and agents. Any SaaS platform that feels like a "walled garden," locking content away, will be rejected by power users. The winning platforms will prioritize open, interoperable access to user data.

Enterprise SaaS companies (the 'henhouse') should be cautious when partnering with foundation model providers (the 'fox'). While offering powerful features, these models have a core incentive to consume proprietary data for training, potentially compromising customer trust, data privacy, and the incumbent's long-term competitive moat.

The ability for AI agents to access and operate on a SaaS platform's data is becoming critical. Companies that lock down their data risk being isolated, while those with open data APIs will become part of the new AI ecosystem, even if it means ceding the primary 'workspace' layer.

When AI startups demand access to your platform's data via API, turn the tables. Gate your APIs and, during negotiations, agree to their request on the condition that you get reciprocal access to the AI outputs they generate from your data. This reframes the power dynamic and protects your moat.

SAP is moving beyond API fees by requiring explicit approval for external AI agents to access customer data. This strategy focuses on controlling and monetizing the valuable "context" (knowledge graphs, ontologies) that makes raw data intelligible for AI, representing a significant escalation in how enterprise firms protect their data moats.

As companies integrate AI agents into their workflows, unrestricted API access to their own data is non-negotiable. SaaS providers that paywall or limit API access will be abandoned for more open platforms that don't hold customer data "ransom."

To manage risks from 'shadow IT' or third-party AI tools, product managers must influence the procurement process. Embed accountability by contractually requiring vendors to answer specific questions about training data, success metrics, update cadence, and decommissioning plans.