Data, Trust and the Autonomous Supply Chain
Artificial intelligence may become the face of tomorrow’s supply chains. But it will not be their foundation. That role will belong to governed data and trust.
This is the underlying message emerging from Gartner’s recent Supply Chain Symposium/Xpo, despite the heavy emphasis on AI and the “autonomous era”. Public material around the 2026 events stressed the need to “renew, rethink and recode” next-generation supply chains around AI-enabled models and new technologies. Commentary from these conferences shows that AI now dominates the agenda, but also that many companies are struggling to move from pilots to measurable value because their data is fragmented and the rules governing its use are still evolving.
Photo: Kindel Media
The problem is not that the technology is incapable. In planning, forecasting, routing and risk sensing, AI is already delivering promising results in specific use cases. The constraint lies in the environment around it: siloed systems, inconsistent supplier records, patchy data quality and weak governance. The more credible examples of “self-healing” or self-adjusting supply chains do not begin with perfect data. They begin with the imperfect information companies already have, then improve it over time through use, feedback and redesigned processes. Case studies associated with this year’s symposium, including large consumer-goods and healthcare manufacturers strengthening their data foundations to shorten the gap between insight and action, point in the same direction. Governed, “good enough” data, continuously improved, is more valuable than waiting for an ideal state that never arrives.
Supplier risk offers an even clearer test. What was once largely a matter of financial checks and basic compliance has broadened into a multi-dimensional field: operational continuity, labour standards, cyber exposure, ESG performance and geopolitics now feature prominently in supplier and third-party risk discussions. Recent Gartner-related agendas and analyses reflect this shift, with dedicated streams on supplier-risk management, separate rankings of solution providers and a proliferation of specialised tools. In practice, many leading companies are therefore assembling ecosystems of suppliers, data sources and applications, connecting them through common standards and governance rather than relying on a single platform.
Regulation is accelerating this trend. The EU’s Corporate Sustainability Due Diligence Directive, which entered into force in July 2024, will require in-scope companies to identify, prevent and address adverse human-rights and environmental impacts across their own operations, subsidiaries and value chains, with phased implementation through the second half of this decade. The EU Deforestation Regulation introduces due-diligence obligations for operators and traders of certain commodities entering or leaving the EU, with core rules applying from late 2024 and extended timelines for smaller operators into 2026. In the United States, the Uyghur Forced Labor Prevention Act and related measures place the burden on importers to demonstrate that goods are not linked to forced labour, backed by a growing entity list. In this context, the ability to trace, explain and, when necessary, restrict automated decisions based on trusted data is moving from “nice to have” to legal expectation.
Industry and policy work on data governance reinforces the same conclusion. Research on supply-chain data-governance frameworks and traceability emphasises that secure, compliant data sharing requires clear roles, responsibilities and processes, along with requirements for data quality, interoperability and access control. Singapore’s Trusted Data Sharing Framework and initiatives such as its common data infrastructure for maritime trade illustrate how public-private efforts can define the rules and standards that enable data sharing in complex ecosystems. In such settings, AI is a powerful user of the infrastructure, but not the infrastructure itself.
This is where trust becomes an operating principle. Rachel Botsman has argued in Gartner-linked work that risk asks whether people are protected, while trust asks whether they are willing; leaders, she suggests, must build the bridge between the two. I have repeatedly argued that shared systems in supply chains rarely emerge from code alone; instead, they crystallize when trust, culture, and community align, with technology following trust. That trust has to be operational: suppliers need confidence that commercially sensitive data will be handled properly; partners need clarity on who can access what; regulators need assurance that automated decisions can be explained and challenged when necessary.
The geopolitical and regulatory backdrop heightens the stakes. Several analyses describe how supply chains are increasingly becoming instruments of foreign policy, shaped by tariffs, industrial policy and strategic rivalry. At the same time, ESG expectations and human-rights rules are tightening. In such a world, governed data and trust are not just enablers of efficiency. They are conditions for resilience, legitimacy and continued access to markets.
Boards should ask themselves: does the company’s AI roadmap sit on top of a clear data-governance framework and a trust architecture with suppliers and partners robust enough to withstand regulatory and geopolitical scrutiny? If not, the organisation is investing in applications without a secure operating environment. The encouraging news is that these foundations can be built. No company can define all the rules alone, but industry groups, standards bodies and public-private partnerships are already experimenting with shared data frameworks, information-sharing communities and sector-specific data spaces.
The autonomous supply chain will not be decided by whose AI is smartest. It will be decided by who can create data that others trust, and systems that others will join, under rules that regulators and societies accept. That is a harder task than building a model. But it is also the more durable source of advantage and one that remains open to those prepared to do the slower, deeper work now.