Chinese AI models now handle nearly half of U.S. router traffic

A Miami AI implementation firm says Chinese-developed models now process up to 46% of token traffic on a major U.S. AI router, up sharply from about 30% a year ago. Layer3Labs says the shift is largely hidden inside vendor products and shadow AI, creating data-sovereignty and compliance risks for businesses.

Why it matters: - Layer3Labs says a growing share of U.S. business AI traffic is being processed by Chinese-developed models, raising questions about where customer data is actually going. - The firm says the risk is especially acute for healthcare, legal and finance companies that handle sensitive data. - Layer3Labs also says firms with high shadow AI exposure face an estimated $670,000 breach premium per incident.

What happened: - Layer3Labs said as much as 46% of token traffic on the largest U.S.-based AI model router is now routed to Chinese models. - The firm said U.S. models have fallen from roughly 70% of that traffic a year ago to about 30% today. - The shift is taking place in Miami-based Layer3Labs' audit work across small- and mid-sized business AI stacks. - In its review of dozens of business AI stacks, Layer3Labs found 70% contained at least one Chinese model the company had not knowingly approved.

The details: - Businesses often buy an AI feature without choosing the underlying model directly, which allows the model to be routed, resold or white-labeled without notice. - Cost-optimizing routers can send prompts to the cheapest available provider, and Layer3Labs says Chinese endpoints are increasingly cheaper because inference can run 60% to 90% less. - Andreessen Horowitz estimates 80% of U.S. startups build on Chinese base models, with Airbnb, Uber and Cursor listed as named adopters. - Research cited by Layer3Labs puts 70% of enterprise AI activity outside IT oversight, with many small models able to run on a laptop and bypass security review. - Layer3Labs says any prompt processed by a Chinese-provider endpoint falls under China's National Intelligence Law, which can compel data disclosure to the state. - In July 2026, the House Select Committee on the CCP opened a probe into U.S. firms' use of these models. - The NDAA already bars DeepSeek from Defense Department systems. - Layer3Labs says businesses may be unaware that data is moving through vendor backends and other hidden AI pathways.

Between the lines: - The core issue is not just model choice. It is visibility into the AI supply chain. - The report suggests many companies are treating AI like a feature purchase instead of a data-routing decision. - That creates a gap between security policy and actual model usage, especially when employees adopt tools outside IT control. - The political and regulatory scrutiny is rising at the same time the economics are pushing more traffic toward cheaper Chinese models.

What's next: - Layer3Labs is urging companies to run a provenance check on every AI tool that touches customer data. - The firm says regulated industries should verify which models are actually processing data and assess data-sovereignty and compliance risk. - Layer3Labs is offering a free AI Stack Sovereignty Check to identify the models handling company data. - Jonathan Teplitsky said business owners need to ask whose jurisdiction their customer data now lives under.

The bottom line: - Many U.S. companies may be using Chinese AI models without knowing it, and that hidden exposure is becoming a security and compliance issue.