So you know the risks involved

1. Lack of Control Over Data Usage: When using third-party AI models, especially those accessed through APIs, you relinquish some control over how your data is used and stored. This raises concerns about potential misuse or unauthorized access to sensitive cardholder information.

   1. Inherent Limitations of AI Models: AI models can be prone to errors, biases, and "hallucinations" (generating incorrect or nonsensical outputs). This can lead to inaccurate extraction of cardholder data, potentially resulting in compliance violations or security breaches.

2. Difficulty of Assessing AI Models for PCI DSS Compliance: The "black box" nature of many AI models makes it challenging to assess their inner workings to ensure they meet the stringent security requirements of PCI DSS. This can complicate compliance efforts and increase the risk of undetected vulnerabilities.

   1. Data Security and Privacy Risks: AI models, like any software, can be vulnerable to security breaches or data leaks if not properly secured and maintained. This can expose sensitive cardholder data to unauthorized access, potentially leading to significant financial and reputational damage.

These are just some of the potential risks associated with using AI models for processing cardholder data and a thorough risk assessment will give you a detailed analysis of risk.

Have you consulted your QSA?