Skip to main content

Why Profiles Matter

A frontier model developer and a bank deploying third-party AI face fundamentally different governance challenges. Applying identical weights would penalize deployers for not publishing safety research and developers for not having vendor governance programs. Alpha uses three profiles within the same 12-dimension framework. The dimensions are the same; the weights reflect what matters most for each company type.

Profile Definitions

Developer Profile

Companies that build, train, and distribute AI models. Examples: Anthropic, OpenAI, Google DeepMind, Meta AI, xAI, Stability AI, Mistral Emphasis: Safety (D2: 12.3%), Data Ethics (D4: 9.8%), Cybersecurity (D9: 10.7%), Corrigibility (D12: 10.0%)

Deployer Profile

Companies that integrate, deploy, and operate AI systems built by others. Examples: JPMorgan, UnitedHealth, Walmart, most Fortune 500 companies Emphasis: Governance Infrastructure (D5: 11.4%), Leadership (D1: 9.8%), Fairness (D6: 8.2%), Supply Chain (D10: 8.2%)

Hybrid Profile

Companies that both build and deploy AI systems. Examples: Apple, Amazon, Microsoft, Google (cloud + models), Tesla Emphasis: Balanced weights with slight emphasis on Safety (D2: 9.8%) and Governance Infrastructure (D5: 9.8%)

Profile Assignment

Profile assignment is determined during Phase 1 (Evidence Collection) based on:
  1. Primary business activity: Does the company develop foundation models or primarily deploy third-party AI?
  2. AI materiality: How material is AI to the company’s core business and risk profile?
  3. Model distribution: Does the company distribute models to external users or deploy internally only?
The assigned profile is always disclosed in the rating output. Hybrid is the default when classification is ambiguous.

Weight Comparison

D11 and D12 carry equal weight across all profiles: these are universal governance requirements regardless of whether a company builds or deploys AI.