A vendor says its AI service is secure, but the company will send confidential documents. Which two issues should due diligence resolve? Select 2 answers.

1. How data is processed, retained, accessed, and used by the service under the applicable terms.
2. Whether the team can avoid reading the service terms entirely.
3. Only whether the vendor has a recognizable logo.
4. Only the fastest demonstration response.
5. Whether the available controls and processing locations meet the company requirements.