01What happens.
A site built for COVID is built with the compliance oversight that normally governs published clinical material applied in part, because the emergency does not allow for it in full.
When the pandemic ends, the site simply stays online. AI reads it with the same confidence as the corporate site, and nothing on it marks the material as superseded.
02Why it matters.
The decision to build fast was right at the time / like others a project outsourced. What was never taken was the decision to take the site down, because ownership of the site ended with the programme and passed to nobody. Years later the site is answering clinicians' questions about a withdrawn product, in the company's name, with instructions the company would not publish today.
79% of AI misinformation arises from organisations' own content. This site is the company's own content, and it is the kind that a regulator, a prescriber and a patient would each expect the company to have removed.
03The case.
During the pandemic a pharmaceutical company outsourced the build of the microsite in weeks to support clinicians using its products under emergency conditions. The site carried product information, administration guidance, supply updates and contact routes, and it was used heavily while the emergency lasted. The compliance oversight that normally governs published clinical material was not applied in full. That was a reasonable trade-off at the time, made openly and for the right reasons, and it was never revisited.
The pandemic ended, the programme closed, the team dispersed, and the site stayed online (no one asked 3rd party to close it) still answering.
Over the following years the company's products and guidance moved on. Documents were superseded on the corporate site, some products were no longer offered, and one product was withdrawn from the market. The microsite recorded none of it, so superseded documents sat beside current ones, withdrawn products were presented as available, and the withdrawn product still carried its full use and administration guidance.
AI reads the microsite as it reads the corporate site. Asked about the withdrawn product, it returns the microsite's guidance as current clinical instruction, because the guidance is complete, specific and well structured, and nothing on the page says the product is gone. A clinician asking the question receives an answer the company stopped standing behind years ago, and has no way of knowing it.
The site had been outside the company's review cycle since the programme ended, because it had never been inside one, and no review cycle looks for what it does not list. The site had outlived its purpose and its owners, and the company's review process covered the properties on its inventory, which had never included a site built outside it.
04Exposure.
Withdrawn-product guidance served as current under the company's name reaches patient safety, the product's licence history and the company's directors at once. It is the company's own material, published by the company and left standing by the company. The company is accountable for clinical instruction it has published and left published, and the regulator's question is how a withdrawn product's full administration guidance remained available years after withdrawal.
The position is stated as accountability; whether any obligation is engaged on the facts is for the company's advisers.
Behind the regulatory question sit the consequences if a clinician acted on the guidance: the adverse event report that could follow, and the correction of a site the company had forgotten it owned. A prescriber who found the company's own site contradicting its withdrawal would have reason to trust the next instruction less, and the company cannot know how many have.
05What AI Readiness changes.
The site was never on the inventory, so no review ever reached it. Found from outside, as AI finds it, the microsite is one of the properties still serving clinical material beyond the governed core. AAAnow evidences those properties, the versions on them that conflict with the current position, and the withdrawn products they present as available. Your team then retires the material that no longer applies, corrects what remains, and records the current status of each product in each market, including whether it is withdrawn or no longer offered.
06Related use cases.
Clinicians received instructions the company had replaced
The clinical instruction exposure this case documents at its origin.
Patients were told a withdrawn medicine was available, because the website still said so
The withdrawn-product consequence on its own.
20 years of documents were still answering for the company as if each were current
The wider legacy estate of which this microsite is one property.
07References.
- AAAnow, AI Readiness paper, Jun. 2026: documented use case, anonymised.
- 79% of AI misinformation arises from organisations' own content: AAAnow research.
Next step
Talk it through, in your terms.
The briefing sets this case in your organisation’s terms, and the discussion follows your questions.
Observed, anonymised. No company is identified.