Who is legally responsible when an AI hiring tool makes a discriminatory decision?

I'm curious about something that seems like it will become a much bigger employment-law issue.

If a company buys an AI recruiting system from another company and that software ends up discriminating against certain applicants, who is responsible? The employer that used it, the company that developed the AI, or potentially both?