A new DataGrail report finds many AI vendors fail to disclose subprocessors and hidden models, exposing companies to rising shadow AI and data privacy risks.