Rippling just got sued for cloning its AI governance vendor's entire product. Your vendor contracts have the same hole.

Runlayer, a $42M AI security startup backed by Khosla Ventures, sued Rippling in federal court yesterday.

The allegation: Rippling spent a year as Runlayer's customer, had full access to its source code and architecture under NDA, then quietly built a clone to launch as its own product.

An insider texted Runlayer's CEO directly: "There's been a project internally to build essentially a clone. It's almost a 1 to 1 copy."

This isn't a one-off dispute. It's the template for what happens when your AI vendor is also your future competitor.

Runlayer builds the governance layer that sits between AI agents and enterprise data. Rippling, a $16.8B HR platform, was evaluating that layer — then allegedly decided to build it in-house using everything it learned from the partnership.

Audit your vendor contracts today.

Every NDA, every pilot agreement, every proof-of-concept — check what access you gave, what protections exist, and whether your vendor can legally use your proprietary architecture to build a competing product.

The AI governance market is worth billions. Your vendors know it. Some of them are already building.

SOURCE: https://nypost.com/2026/07/28/business/nyc-ai-startup-backed-by-tech-billionaire-khosla-sues-rippling-over-trade-secret-theft/

VERIFIED: New York Post (July 28), Reuters (July 28), PR Newswire (July 28), Law.com (July 28)

SIGNAL: This is the first major trade secret lawsuit in the AI agent governance space. It exposes a structural risk in enterprise AI procurement — vendors evaluating your security stack may be using that access to build competing products. Every CISO reviewing AI tooling needs to see this.