China drafts export controls on 23 AI technologies

If you call a Chinese model through an API, nothing changes. If you want one running on your own servers abroad, read on.

On Oct. 16, China's Ministry of Commerce and Ministry of Science and Technology proposed adding 40 technologies to the country's catalogue of technologies banned or restricted from export. Fourteen would be prohibited and 26 restricted, according to the commerce ministry.

AI accounts for 23 of them.

Models, agents and compute are on the list

The ministry says the AI items cover large models, agents, compute clusters and information processing. AI that generates or mutates malicious code would be prohibited outright. AI-assisted vulnerability discovery would be restricted. The other 17 items cover biomedicine (5) and solar manufacturing (12).

The Decoder reports that large models would be caught if they are trained on China's "important data" or cross one of three lines: 10^26 FLOPs of training compute, 2 trillion parameters, or a global top-10 ranking. The ministry's own announcement page does not spell those numbers out, so treat the thresholds as reported.

The carve-outs are wide. The ministry says offering a restricted model through API calls, apps, websites, SaaS or lightweight on-device versions is not an export. Technology already public through open source or academic papers would be excluded, and new open-source releases would get automatic licensing.

What stays in scope is moving restricted technology out of mainland China, including installing a restricted model on local servers abroad. According to the ministry, the test is whether restricted technology moves from inside China to outside it.

Registration starts now. Until the catalogue is final, exporters must register covered technology exports through the ministry's system before they ship. Comments close Nov. 15, China Daily reports.

Beijing is writing its own playbook

For years, AI export controls ran one direction, from Washington at Beijing. This draft is China building its own version, aimed at the area where its labs now compete hardest. China Daily quotes a commerce ministry spokesperson saying the revision "does not target any specific country, region or entity."

Here's the thing. The carve-outs protect exactly the business Chinese labs already do with you. Published open weights stay out of scope. API calls stay out of scope. What gets harder is a Chinese lab handing its non-public frontier technology to a partner abroad to run privately.

What it means if you build on Chinese models

If you use open-weight models from Hugging Face, the ones already published are public and excluded. If you route traffic to Chinese models through an API, the ministry says that is not an export.

The exposure is enterprise deals. A private, on-premises version of a listed Chinese model for a company outside China would need registration now and, once the catalogue is final, may need a license. If that is in your contract pipeline, ask your vendor today how they plan to comply.

There is a second-order effect. Open-sourcing is now the fast lane out of China. That gives Chinese labs one more reason to keep publishing weights.

Watch Nov. 15

Watch the final catalogue after comments close, and whether the thresholds The Decoder describes survive into it. Then watch whether the next frontier Chinese model ships open or closed.

Keep calling the API. Read the final list before you sign an on-prem deal.