Krutrim AI Vendor Risk Profile
Ola subsidiary that pivoted from sovereign LLM development to AI cloud services in late 2025 after a strategic overhaul. Pauses on chip and consumer chatbot work, headcount reduced from ~550 to ~150. Now serves ~25 enterprise customers across telecom, finance, and healthcare with Indic-language model APIs and GPU compute.
Risk overview
Risk score: 64/100
Risk tier: High
Safety rating: 36/100 (higher is better)
Lower risk scores indicate lower assessed risk.
Last verified: May 15, 2026 Fresh
Risk dimensions
| Dimension | Risk score |
|---|---|
| Data Handling | 80/100 |
| IP Exposure | 58/100 |
| Jurisdiction | 29/100 |
| Security | 63/100 |
| Regulatory Compliance | 80/100 |
| Transparency | 85/100 |
| Business Stability | 59/100 |
| Dependency Chain | 64/100 |
| Agent Governance | Not assessed |
Analyst summary
Rating: Caution
Krutrim's August-2025-to-May-2026 trajectory is the cautionary tale of the 2025 LLM hangover: headcount fell from ~550 to ~150, the consumer chatbot Kruti was shut down, chip and frontier-model work paused, and the company pivoted to AI cloud services. FY2026 revenue grew threefold to ~$31.5M with a first profit, but Inc42 reported that 90% of FY2025 revenue came from intra-Ola-group entities — a related-party concentration that should make any independent buyer pause. India's first GenAI unicorn now competes on infrastructure rather than models.
Bottom line: High-elevated risk. The post-pivot Krutrim is a credible Indic cloud vendor in narrow contexts, but the combination of related-party revenue concentration, undocumented compliance posture, and recent strategic upheaval make it a much weaker pick than Sarvam for independent buyers. Worth tracking; not currently a safe primary dependency.
Strengths
- First Indian GenAI unicorn — significant compute and engineering capital concentrated in one company
- Open-weight Krutrim-1 and Krutrim-2 models published — usable for self-hosted Indic deployments
- Indic-language coverage matches Sarvam's at the model layer
- Sovereign-cloud positioning aligns with India DPDP residency needs
- FY2026 reached first net profit — financial discipline is improving
Concerns
- 90% of FY2025 revenue from intra-Ola-group entities — independent demand validation is thin
- Headcount reduction from ~550 to ~150 in 8 months indicates significant strategic instability
- No SOC 2, ISO 27001, or DPDP attestation publicly disclosed
- No publicly published DPA, subprocessor list, or model cards
- Frontier-model and chip programs paused — narrows the addressable use cases
- Parent-company governance overlap (directors on related-company boards) flagged in trade press
Best for
- Buyers inside the Ola ecosystem with existing commercial relationships
- India-only deployments where cost beats compliance maturity as a procurement criterion
- Researchers wanting access to a second open-weight Indic-language model family
Avoid if
- You require formal SOC 2, ISO 27001, or HIPAA attestation
- Your procurement requires a public subprocessor list and DPA
- You need a vendor with predictable strategic direction — Krutrim's roadmap was rewritten in late 2025
Citations
- Governance — Open Source Contributions
- Vendors — Company Stability Score
- Vendors — Employee Count Range
- Jurisdiction Profile — Geopolitical Risk Notes
- Vendors — Parent Company