Companies and Governance: Labs, Governments, Coordination

Why This Matters

Abstract discussion about AI is useful; specific decisions happen in specific places. A small number of actors are, in practice, making the choices that shape the transition.

Knowing who they are, what they're doing, and how they're governed is necessary for informed engagement.

This chapter isn't a comprehensive map; it's a pointer. The details change fast; the shape is stable enough to describe.

The Frontier Labs

As of mid-2020s, a short list of firms can train frontier AI models. Their choices matter enormously.

OpenAI

Founded 2015 originally as a non-profit; restructured to "capped-profit" in 2019; increasingly entangled with Microsoft.

  • Products: GPT-4/5 family, ChatGPT, various specialised models
  • Strategy: aggressive capability development, broad commercial deployment, safety research alongside (though staff turnover in safety teams has been notable)
  • Governance: board of directors, Microsoft equity partnership, complex non-profit/for-profit structure

OpenAI is the highest-profile lab. Its choices set much of the industry's pace. It has periodically been a focal point for debates about safety, transparency, and governance.

Anthropic

Founded 2021 by ex-OpenAI researchers. Public benefit corporation.

  • Products: Claude family of models
  • Strategy: positions itself as safety-focused; emphasises Constitutional AI, interpretability research, and responsible scaling
  • Governance: PBC structure, long-term benefit trust, specific safety commitments

Anthropic has been influential in the safety-oriented discourse. Its research (Constitutional AI, mechanistic interpretability, responsible scaling policy) shapes broader industry practice.

Google DeepMind

Formed by merging Google Brain and DeepMind in 2023.

  • Products: Gemini family, various specialised systems (AlphaFold, etc.)
  • Strategy: research-heavy, deep integration into Google products
  • Governance: part of Alphabet, subject to Alphabet's governance; also has some specific AI principles

DeepMind has produced some of the most impressive AI research (AlphaGo, AlphaFold, MuZero). Google's product distribution gives it enormous deployment reach.

Meta

  • Products: Llama family (released openly), various internal applications
  • Strategy: bet on open source as a strategic position against closed competitors
  • Governance: standard corporate governance with some AI-specific policies

Meta's open-source Llama releases have shaped the field substantially. Capability gains in open-source models make the open-vs-closed debate more consequential.

xAI

Elon Musk's lab; Grok family.

  • Strategy: less transparent than competitors; positions itself against perceived bias in other models
  • Governance: standard corporate, with Musk as dominant decision-maker

Less is publicly known about xAI's safety practices. Its decisions are less checked by public research norms.

Chinese labs

DeepSeek, Zhipu, 01.AI, Moonshot AI, Baichuan, Alibaba's Qwen team, ByteDance's labs.

  • Collectively at or near the frontier in many capabilities
  • Regulated by Chinese government; less transparent to Western observers
  • Some (DeepSeek especially) have produced influential open releases

The gap between US and Chinese frontier labs has been contested through 2024-2026. Some analyses say US leads by months; others say the gap is narrower than widely believed.

Smaller frontier actors

Mistral (France), Aleph Alpha (Germany), Cohere (Canada), and others. Not at the absolute frontier of largest models but capable and significant.

Infrastructure

The actors enabling all of the above:

  • Nvidia: near-monopoly on training-scale AI chips
  • TSMC: fabs that produce those chips
  • Cloud providers: Microsoft, AWS, Google Cloud, Oracle, others
  • Data providers: licensing deals, scraping

Concentration in the infrastructure layer is a key constraint on the whole field.

Lab Behaviour

Important dimensions on which labs differ:

Transparency

How much do they publish? What do they say about training data, safety testing, internal processes? Anthropic publishes substantial safety research. OpenAI has moved toward less transparency. Meta releases model weights openly. xAI is opaque.

Safety investment

How much staff and research funding goes to safety vs capability? Varies. Hard to measure from outside. Changes over time.

Deployment caution

How carefully are new capabilities released? Gradual rollout, evaluations, access controls, red-teaming. Anthropic has been more cautious; OpenAI has varied; Meta has been relatively fast; xAI has been fastest.

Governance voluntary commitments

Various labs have signed voluntary commitments: the Bletchley Declaration, Seoul commitments, responsible scaling policies. Compliance is uneven; these are not legally binding.

Response to regulation

Some labs engage constructively with regulators; others resist; some both, depending on jurisdiction.

Reading labs well requires watching actions, not just statements.

Government Responses

Different jurisdictions have taken different approaches.

European Union

The EU AI Act (entered force 2024, phased in through 2026-2027). Risk-based framework:

  • Banned uses: social scoring, biometric categorisation, emotion detection at work, others
  • High-risk uses: medical devices, hiring, critical infrastructure. Compliance requirements, conformity assessments
  • Limited risk: transparency requirements
  • Minimal risk: no specific rules

Additionally, rules for general-purpose AI (large foundation models): compliance thresholds, transparency, copyright.

The EU approach is the most comprehensive globally. Critics say it's overly rigid; supporters say it's the most serious attempt at governance.

United States

More fragmented.

  • Federal level: Executive Order 14110 (2023; revised 2025), NIST frameworks (voluntary), AI Safety Institute within NIST
  • State level: California AI laws, Colorado AI Act, New York algorithmic hiring rules, and others
  • Sector-specific: FDA on medical AI, SEC on financial AI, DOL on hiring, etc.
  • Congress: much proposed legislation, little passed

US approach is generally lighter-touch than EU; criticised by safety advocates as inadequate, defended by industry as enabling innovation.

United Kingdom

Pro-innovation framework. Hosted Bletchley AI Safety Summit (2023), founded AI Safety Institute (now AISI Global Network). Less comprehensive than EU; more focused than US.

China

Increasingly specific regulation:

  • Generative AI rules (2023)
  • Algorithmic recommendation rules (earlier)
  • Requirements for "socialist values" in AI outputs
  • Data localisation and security requirements

Chinese regulation is substantial but oriented differently from Western regulation: more focused on content control than on safety risks as understood in the West.

Other jurisdictions

Singapore (AI Verify framework), Japan (AI Safety Institute), Korea, India, Australia, Canada, Israel, various others have partial frameworks. None matches EU's comprehensiveness.

International Coordination

Several efforts:

Summits

  • Bletchley Declaration (2023, UK): broad commitments, voluntary
  • Seoul Declaration (2024): extended commitments; specific points on frontier models
  • Action Summit (2025, France): further iteration
  • Continuing cadence under various hosts

These produce commitments without enforcement. Their value is partly in norm-setting, partly as a forum for dialogue.

AI Safety Institutes

Originally UK, then joined by US, Japan, Singapore, Canada, others. Networked: share research, coordinate on evaluations. Voluntary but substantive.

Multilateral organisations

  • OECD AI Principles (2019, updated)
  • UN General Assembly resolutions (2024)
  • G7 Hiroshima Process on Generative AI
  • G20 AI discussions

All voluntary, all partial. Create context for more serious coordination if it comes.

Bilateral coordination

US-UK AI Safety Institute exchange, EU-US TTC, various bilaterals. Often the real work happens here, under the voluntary-summit headlines.

Private coordination

Frontier Model Forum (Anthropic, Google, Microsoft, OpenAI). Industry coordination on safety, evaluations, information sharing. Useful; not a substitute for public governance.

The Governance Gap

Stepping back: the governance landscape is visibly thinner than the stakes warrant.

  • No international treaty on AI
  • No binding obligation on any lab to do specific safety work
  • No global ban on specific dangerous applications
  • No requirement that labs report to any public body
  • No meaningful enforcement in most jurisdictions

This is normal for emerging technology; it's also precisely the gap people worried about the AI transition want filled.

Some trend lines point toward more governance (EU AI Act's phased-in binding requirements, more countries opening AI safety institutes, more evaluation programs). Others point against (geopolitical competition slows coordination, industry lobbying for lighter frameworks, slow institutional adaptation).

Where the balance ends up depends on politics still in motion.

Who Has Actual Influence

An honest look at where decisions really happen:

  1. Frontier lab leadership: sets training priorities, deployment pace, safety investment
  2. Major cloud and chip firms: determine capacity for training, can enable or block access
  3. National governments: set regulations, export controls, investment
  4. Key legislators and regulators: write the rules
  5. Large deployers: what Microsoft, Apple, Salesforce, financial firms do with AI shapes actual use
  6. Investors: where capital flows affects what gets built
  7. Standards bodies: ISO, NIST, IEEE quietly shape technical norms
  8. Civil society: academics, journalists, NGOs affect public opinion and policy

Individual AI researchers have some influence via their work and public communication. Individual users have influence through market behaviour. Both are real but smaller than the list above.

What's Decided in the Next Few Years

Some specific decisions shape the trajectory:

Frontier model deployment rules

How are frontier models tested and deployed? What capabilities require approval? What triggers restrictions? Decisions being made by labs, potentially codified by regulators.

Can AI train on copyrighted material without compensation? Courts and legislatures are answering. Outcomes shape economics and concentration.

Compute export controls

US export controls on advanced chips to China. Being expanded. Shapes global distribution of frontier capability.

Alignment and safety requirements

Will labs be required to demonstrate alignment before deployment? By whom? To what standard? Current answer is mostly "no"; this may change.

Open source frontier models

Will governments restrict release of frontier model weights? Currently no, broadly. Could change if a specific incident triggers reaction.

Liability

If AI harms someone, who's liable? Developer? Deployer? User? Courts and legislatures are sorting this. Outcomes affect deployment incentives.

International coordination on specific risks

Biosecurity, autonomous weapons, election interference. Possible targets for specific international agreements.

Each of these is being decided with varying degrees of urgency and seriousness. None has a clear and settled answer yet.

What To Watch

Concrete indicators of governance trajectory:

  • Enforcement actions against AI firms for specific violations
  • Binding commitments moving beyond voluntary summits
  • Concrete international agreements on specific capabilities
  • Regulatory capacity growing in AI safety institutes
  • Safety research funding from governments
  • Legal precedents establishing liability and rights

Trends in these over the next few years predict much about outcomes.

Common Pitfalls

"Government should do more." Government should probably do some more of some things and less of others. Blanket statements miss the specific governance challenges

"Labs should self-regulate." They can't reliably, and largely don't. Self-regulation has a long track record of underperformance, especially under commercial pressure

"We should just ban frontier AI." Specific bans are possible; blanket bans are politically unrealistic and would be unevenly enforced globally. Better to focus on specific high-risk applications

"Regulation stifles innovation." Sometimes. Sometimes it enables it by reducing uncertainty and increasing trust. Depends on specific rules

"Other countries will race ahead if we regulate." Partly true. Also self-serving argument for no regulation. The answer is coordinated regulation, which is hard but not impossible

Next Steps

Continue to 11-individual-orientation.md for what a single person can reasonably do in this situation.