An AI safety institute is a public-sector lab. Its staff are mostly technical: researchers and engineers who probe advanced AI systems for dangerous capabilities, build ways to measure those risks, and tell governments what they find.
What they do
The core job is evaluation. An institute designs tests, often called evals, that check what a model can do in areas such as cyberattacks, biological risk, and loss of control. It may get access to a model before release and run those tests, sometimes alongside the developer's own red teaming.
Second, institutes publish research and tools. The UK body, for example, open-sourced Inspect, a platform for running AI evaluations that others can use. Third, they advise ministers and regulators, turning technical findings into something a policy team can use.
Advisers, not regulators
Most institutes do not make binding law. The UK institute has said it is not seeking to mandate requirements for frontier developers and instead aims to contribute to technical standards. Enforcement, when it exists, sits with a separate regulator or a legislature. Some governments pair an institute with a regulator, with the institute supplying technical expertise.
A short history
The UK set up the first one in 2023 as the AI Safety Institute. In February 2025 it was renamed the AI Security Institute, shifting emphasis toward security risks. Other countries created counterparts, including the United States, Japan, Singapore, South Korea, Canada and France. A network of these bodies was launched in 2024 to share evaluation methods and has since been renamed to reflect a broader measurement focus. Names and mandates keep changing, so check the current one before citing it.
Why you should care
If you build with frontier models, institute evaluations influence the safeguards you see: what a lab publishes in a system card, which capabilities trigger a lab's own preparedness framework or responsible scaling policy, and what questions regulators ask next. Labs often name the institutes that tested a release.
What they are not
An institute is not a certifier. Passing its tests does not mean a model is safe, and a test it ran says only that those risks were measured in that way. Results depend on the access and time the institute was given.
Read an institute's reports for what was tested and how, and treat gaps as information too.