Buying alternative data means taking on a new counterparty in a vendor relationship, with broader risks than insider trading and personal data, which tend to dominate the risk assessment.