The shared responsibility model in AI can be broken into three columns:

This middle layer contains the gateways and orchestration services (LLM Gateway, MCP Gateway, API Gateway) that both you and the provider have a hand in. The provider delivers the platform, but the organization configures the policies, permissions and guardrails that govern how it operates.

The providers deliver managed AI services that abstract the underlying infrastructure. These are the platforms themselves and each provider has branded their offering differently.

Every major CSP now offers a managed AI platform. The table below provides a vendor-objective comparison so you can evaluate the landscape regardless of which cloud(s) you operate in.

Each of these platforms provides the foundational AI infrastructure (compute, model hosting, APIs) while expecting the customer to configure security policies, access controls and governance on top.

The following table outlines key security capabilities and the corresponding native service each CSP offers.

Matt Popa is a Practice Director at GuidePoint Security on the Cloud Security Practice, where he leads delivery of cloud, AI and automation security services across Microsoft, Automation and AI. He is part of GuidePoint’s Cloud Security practice, which helps organizations adopt cloud and AI securely and with confidence. Matt has 20 years of experience in the cybersecurity and IT industry, including more than 6 years in the public sector and about 8 years supporting federal civilian, aviation, defense and intelligence agencies. He has extensive experience in Platform, Cloud, Automation, AppSec and AI security.