AI model distillation tensions: how alleged copying reshapes US-China competition for builders

Anthropic has accused Alibaba of using AI model distillation at industrial scale to harvest US capabilities and train its own systems, while the Chinese startup Z.ai has released GLM-5.2, a model that competes with top American systems in cybersecurity. For builders shipping AI products, the tightening regulatory and competitive posture around distillation means vendor selection, data provenance, and compliance practices demand closer scrutiny.

What happened

On June 10, Anthropic sent a letter to Senators Tim Scott and Elizabeth Warren alleging that Alibaba accessed Anthropic's technologies through tens of thousands of unauthorized accounts and used the data to train its own models via a technique called distillation Anthropic's letter viewed by The New York Times. Anthropic described these as "distillation attacks carried out illicitly, systematically and at industrial scale to harvest U.S. A.I. capabilities across frontier labs and repackage them as their own."

Separately, the Chinese startup Z.ai released GLM-5.2, a model that is nearly as powerful as top US systems and rivals them in cybersecurity New York Times. The emergence of GLM-5.2 gives new urgency to US companies' complaints, as experts cited in the report say China trails the US in AI development by roughly six months.

Why AI builders should care

For builders relying on frontier models from US labs, distillation as a vector for techno-nationalism introduces operational risk. If regulators respond with new policies or export controls, access to models, APIs, or training data could shift. The Los Angeles Times reported that rival US firms are already sharing information to detect adversarial distillation attempts that violate their terms of service Los Angeles Times. This means model providers may tighten API access patterns, rate limits, or account verification in ways that affect developer workflows.

Additionally, the rise of competitive Chinese models like GLM-5.2 blurs the line between relying on US labs and building in-house. Builders in cybersecurity, defense, or regulated industries must now weigh whether using models with contested training provenance creates compliance or intellectual property risks.

Practical implications

Data provenance and vendor risk are now front-of-mind for AI procurement. Builders evaluating open-weight models from Chinese labs or aggregating multiple model providers should verify training data sources, licensing terms, and whether the model's capabilities were derived via distillation from US systems. The Quartz report noted that Google Cloud's Vertex AI offers DeepSeek models as fully managed, serverless APIs, and Google explicitly recommends pairing them with Model Armor for production safety Quartz. This pattern of US cloud providers distributing Chinese models adds a layer of complexity: procurement from a familiar vendor does not eliminate distillation provenance concerns.

The Economists reported that Anthropic and OpenAI each disclosed evidence earlier in 2026 that leading Chinese AI labs have used American models to train their own The Economist. Builders should treat this as an ongoing signal, not a one-time event, and incorporate distillation risk into model evaluation rubrics.

Regulatory interest is likely to grow. Anthropic asked the senators to explore ways of curbing China's distillation, and policymakers are being urged to address distillation as a vector for competitive risk. Builders should monitor any new rules around API access, model weights export, or training data disclosure that could affect their supply chain.

Caveats

The core allegations about distillation practices and unauthorized data access come from Anthropic's letter and reporting by the New York Times. The specifics may be contested or subject to change as regulators assess evidence. Attribution of GLM-5.2's capabilities to distillation versus legitimate research and development remains a subject of debate among experts. The six-month gap cited by experts is an estimate, not a precise benchmark, and the competitive landscape evolves rapidly.

Builders should treat the distillation debate as an indicator of increasing friction in the AI supply chain, not a settled fact about any particular model's training process.

FAQs

What is AI model distillation and how does it work?

AI model distillation is a training technique where a model learns from the predictions of another model, often enabling a smaller or more efficient model to approximate a larger one's capabilities. In the context of the Anthropic-Alibaba dispute, distillation is described as a method used to harvest US AI capabilities across frontier labs New York Times.

How are Chinese AI models allegedly trained using US systems?

Anthropic alleged that Alibaba accessed its technologies through tens of thousands of unauthorized accounts, using distillation techniques to collect data and train its own AI systems Anthropic's letter viewed by The New York Times. The letter describes the practice as systematic and conducted at industrial scale.

What is the GLM-5.2 model and who developed it?

GLM-5.2 is an AI model released by the Chinese startup Z.ai. It is described as nearly as powerful as top US systems, particularly rivaling them in cybersecurity applications New York Times.

What policy options are regulators considering to curb distillation in AI?

Anthropic asked Senators Tim Scott and Elizabeth Warren to explore policy options to curb distillation as a vector for competitive risk. The New York Times reported that regulators and policymakers are being urged to address distillation, but specific proposals have not been detailed New York Times.