Chinese AI models now handle nearly half of U.S. router traffic

Layer3Labs says Chinese-developed models are processing up to 46% of token traffic on a major U.S.-based AI router, upending where American business data is being routed. The firm warns that most companies do not know which model is reading their information, creating new data-sovereignty and compliance risks.

Why it matters: - Layer3Labs says a growing share of U.S. business AI traffic is being processed by Chinese-developed models, raising questions about data exposure, vendor risk and regulatory compliance. - The shift is often hidden from business owners because many companies buy AI features without knowing which underlying model is actually handling prompts. - Layer3Labs says regulated industries such as healthcare, legal and finance face the most urgent need to check where customer data is going.

What happened: - Layer3Labs said as much as 46% of token traffic on the largest U.S.-based AI model router is now routed to Chinese models. - The firm said U.S. models handled about 70% of that traffic a year ago, and now account for closer to 30%. - Layer3Labs said in its review of dozens of small- and mid-sized business AI stacks, 70% contained at least one Chinese model the company had not knowingly approved.

The details: - Cost-based routing can send prompts to the cheapest available provider, and Layer3Labs says Chinese inference endpoints are often 60% to 90% cheaper. - Andreessen Horowitz estimates 80% of U.S. startups build on Chinese base models, with named adopters including Airbnb, Uber and Cursor. - Research cited by Layer3Labs says 70% of enterprise AI activity sits outside IT oversight, including models small enough to run on a laptop and bypass security review. - The press release says any prompt processed by a Chinese-provider endpoint falls under China’s National Intelligence Law, which can compel disclosure to the state. - The House Select Committee on the CCP opened a probe in July 2026 into U.S. firms’ use of these models. - The NDAA already bars DeepSeek from Defense Department systems. - Layer3Labs cites an estimated $670,000 breach premium per incident for firms with high shadow AI exposure.

Between the lines: - The issue is not just model choice. It is supply-chain visibility. - Many companies may be exposing sensitive data through white-labeled tools, vendor backends and shadow AI use that never goes through formal approval. - The market incentive to lower costs can conflict with security, oversight and jurisdiction concerns.

What's next: - Layer3Labs is urging businesses to run a provenance check on every AI tool touching customer data. - The company is offering a free AI Stack Sovereignty Check to identify which models are processing data and flag data-sovereignty and compliance risk. - Layer3Labs says the first step is simply finding out what is in the AI stack before expanding use.

The bottom line: - The biggest risk for many businesses may not be that they use AI, but that they do not know whose AI is using their data.