55th AIBP Conference & Exhibition Thailand

Asst. Prof. Polawat Witoolkollachit of the Ministry of Digital Economy and Society opened C&E Thailand 2026 by framing the digital economy as a national growth engine — set to reach ~29% of GDP in 2026 — and set out three priorities: digital infrastructure under Cloud First, turning data and AI into economic value through initiatives like ThaiLLM, and building digital trust through anti-scam and cybersecurity efforts. He closed with an invitation to the private sector to invest and build capabilities in Thailand as a base for ASEAN growth.

Thailand's largest enterprises have spent three to five years and significant capital on AI. Boards are no longer satisfied with pilot counts and press releases — they want to know what it is actually producing, where the returns are real, and who is accountable when they are not. This session brings together the most senior decision-makers in Thai enterprise to give an unfiltered account of where AI has delivered, where it has disappointed, and what genuine AI leadership actually requires at the top of an organisation.

Before your AI governance policy was written, your employees had already moved on. They are using ChatGPT to draft board papers, Copilot to summarise contracts, and third-party AI tools to process customer data — none of it sanctioned, little of it logged, and almost none of it assessed for risk. This session maps the hidden AI footprint that exists inside Thai enterprises today and asks the harder question: is the answer stricter controls, or is ungoverned AI adoption a signal that official channels are simply moving too slowly?

—

Your AI vendor passed your questionnaire. They have the certifications. Their pitch deck says enterprise grade. But when did you last look at who they are buying their infrastructure from, whose foundation model they are running on, and whether any of that has been independently verified? The risk runs deeper than vendor selection. Your vendor's model may run on a foundation model from a US hyperscaler, fine-tuned by a third-party consultancy, deployed on regional cloud infrastructure, and accessed by a system integrator your security team has never met. At any point in that chain, a compromise propagates downstream — and most Thai enterprises have no visibility past the first tier.