AI21 Labs AI Vendor Risk Profile
Israel-based AI company building the Jamba model family based on a novel SSM-Transformer hybrid architecture. Focused on enterprise applications with an emphasis on reliability and efficiency.
Risk overview
Risk score: 22/100
Risk tier: Moderate
Safety rating: 78/100 (higher is better)
Lower risk scores indicate lower assessed risk.
Last verified: Apr 19, 2026 Aging
Risk dimensions
| Dimension | Risk score |
|---|---|
| Data Handling | 3/100 |
| IP Exposure | 20/100 |
| Jurisdiction | 20/100 |
| Security | 22/100 |
| Regulatory Compliance | 60/100 |
| Transparency | 40/100 |
| Business Stability | 40/100 |
| Dependency Chain | Not assessed |
| Agent Governance | Not assessed |
Analyst summary
Rating: Acceptable
AI21 Labs is an Israeli frontier builder whose Jamba hybrid Mamba-Transformer models offer strong long-context performance for enterprise use. Its no-training defaults, ISO 27001 posture, and non-US, non-EU jurisdiction give it a differentiated risk profile, though ecosystem scale is smaller than US incumbents.
Bottom line: A credible frontier-builder alternative with strong data handling; ecosystem trade-offs are the cost.
Strengths
- Contractual no-training on customer content through API and Studio
- SOC 2 Type II and ISO 27001 certified
- Jamba architecture delivers strong long-context efficiency (256K+ tokens)
- Israeli jurisdiction offers a diversification option versus US and EU vendors
Concerns
- Smaller ecosystem and fewer integrations than OpenAI, Anthropic, or Google
- No Copyright Shield or comparable IP indemnification program
- Israeli geopolitical exposure may raise concerns for some regulated buyers
Best for
- Long-context document and legal processing use cases
- Enterprises seeking non-US, non-EU jurisdictional diversification
- Developer teams wanting strong reasoning at lower inference cost
Avoid if
- You need the broadest third-party integration ecosystem
- Your procurement requires a US incorporation for data handling
- You need comprehensive IP indemnification on generated outputs
Citations
- Data Handling — Data Retention Period
AI21 retains API inputs and outputs for up to 30 days for abuse monitoring and service quality, after which they are deleted.
- Data Handling — Trains On User Data
AI21 does not use Customer Content submitted through the API or Studio to train or fine-tune our foundation models without explicit consent.
- Governance — Publishes Model Cards
AI21 published a technical paper and model card for Jamba, a hybrid Mamba-Transformer architecture with 52B parameters.
- Ip Profiles — User Owns Outputs
As between the parties, Customer retains all right, title, and interest in Inputs and Outputs generated through the Services.
- Jurisdiction Profiles — Incorporation Country
AI21 Labs Ltd. is an Israeli company headquartered in Tel Aviv, with a US subsidiary AI21 Labs Inc.
- Security Compliance — Gdpr Compliant
AI21 Labs provides a GDPR-compliant Data Processing Addendum for enterprise customers and processes EU data in line with GDPR.
- Security Compliance — Iso 27001
AI21 holds ISO/IEC 27001 certification for its information security management system.
- Security Compliance — Soc2 Type2
AI21 Labs maintains SOC 2 Type II compliance with annual audits, with reports available to enterprise customers under NDA.