Risk · R-133 · Operational Resilience

AI service outage

An inference service, model endpoint or supporting platform becomes unavailable, and the business process that depends on it stops or queues.

Severity
High
Audience
Heads-of · Practitioner
Frameworks
Article 6 · LLM06 · Impact tolerances · Important business services
Reviewed
2026-11-11

What it is

AI systems run on a stack: the model endpoint, the retrieval index, the orchestration layer, the provider's platform and the network between them. Any of these can fail. Hosted models add dependencies the organisation does not control, including the provider's capacity, rate limits and regional availability. Because many firms use the same few providers, an outage tends to be shared. The risk is unavailability, as distinct from a model that is running badly, which is covered in AI model drift and degradation.

How it happens

  • The provider suffers an incident or throttles requests during peak demand.
  • A regional failure removes the only deployment the organisation uses.
  • A supporting component, such as the vector store, fails.
  • Credentials expire or a quota is exhausted.

Why it matters

If the model sits in the path of a customer journey or a control, that journey or control stops. Queues build, customers are turned away, and where the model performs a check such as fraud screening, the choice is between halting the process and running it unchecked.

Warning signs

  • A single endpoint in a single region serves a critical process.
  • Nobody has asked what the process does when the model does not answer.
  • Rate limit errors appear at peak times.
  • The provider's availability history has not been reviewed.

Who owns it

The system owner is accountable for availability. Engineering designs redundancy. The owner of the business process decides what happens when the system is down.

In practice

A retailer's customer contact runs entirely through an assistant built on one hosted model. The provider has a four-hour outage on the busiest day of the year. There is no queue to a human team and no static fallback. The same pattern generalises to any process that was redesigned around a model without asking what happens in its absence.

Mitigating controls

Primary controls

Fallback and manual workaround Corrective
Keeps the process running by other means when the AI is unavailable. A tested alternative, such as a manual process, a simpler model or a degraded mode, is ready to take over when an AI component fails or has to be withdrawn.

Supporting controls

AI contract terms Directive
Sets availability and support commitments. Contracts with AI suppliers cover data use, change notification, information and audit rights, sub-contracting, incident notification, liability and exit.
Important business service impact-tolerance mapping Directive
Shows which important business services the outage threatens. The AI components each important business service depends on are identified in the resilience map, and impact tolerances are set that cover AI-specific disruption, including a model that is running and wrong.
Ongoing AI vendor monitoring Detective
Tracks the supplier's service record. Each AI supplier's performance, incidents, model changes, terms and financial and operational standing are reviewed on a cycle set by how material the supplier is.

Framework and clause references

FrameworkClauseTitle
Digital Operational Resilience Act (DORA)Article 6ICT risk management framework ICT risk management.
OWASP Top 10 for LLM ApplicationsLLM06Unbounded Consumption Denial of service is one cause.
SS1/21: Operational ResilienceImpact tolerancesImpact tolerances The tolerance it may breach.
SS1/21: Operational ResilienceImportant business servicesIdentification of important business services The important business services the outage threatens.

Sources

SS1/21: Operational Resilience Bank of England PRA · official text
OWASP Top 10 for LLM Applications OWASP GenAI Security Project · framework

Related terms

How to cite

Axiom Verity (2026). AI service outage. Reference Library, R-133. https://axiom-verity.com/risks/ai-service-outage. Reviewed 2026-11-11.