Chinese AI Models Now Handle Nearly Half of U.S. Router Traffic

Chinese-developed AI models are now processing as much as 46% of token traffic on a major U.S.-based router, according to Layer3Labs. The firm says most businesses do not know which model is handling their data, raising new concerns about data sovereignty, compliance, and security.

Why it matters: - Up to 46% of token traffic on a major U.S.-based AI model router is now routed to Chinese-developed models. - The shift means American business data can flow through Chinese endpoints without business owners realizing it. - Layer3Labs says the exposure creates data-sovereignty, compliance, and security risk for companies in regulated sectors like healthcare, legal, and finance.

What happened: - Layer3Labs, an AI implementation firm based in Miami, said Chinese models now handle nearly half of U.S. AI traffic on major routers. - The firm said U.S. models accounted for roughly 70% of that traffic a year ago, and now sit closer to 30%. - Jonathan Teplitsky, Layer3Labs CEO, said many owners assume their data stays on U.S.-based servers, but sensitive data is being run through Chinese-provided endpoints.

The details: - The change is often invisible because businesses usually buy an AI feature, not a specific model. - Cost-optimizing routers can send prompts to the cheapest available provider, and that can increasingly be a Chinese endpoint where inference runs 60% to 90% cheaper. - Andreessen Horowitz estimates 80% of U.S. startups build on Chinese base models, with named adopters including Airbnb, Uber, and Cursor. - Research cited by Layer3Labs says 70% of enterprise AI activity happens outside IT oversight, including models small enough to run on a laptop. - Layer3Labs said its own review of dozens of small- and mid-sized business AI stacks found 70% contained at least one Chinese model the company had not knowingly approved. - The firm is offering a free AI Stack Sovereignty Check to identify which models are processing a company’s data and to flag data-sovereignty and compliance risk. - Layer3Labs said the company helps small and mid-sized businesses deploy AI safely and can be plugged into existing tools in 2 to 4 weeks. - Layer3Labs was founded in 2019 and is based in Miami. - The company specializes in AI strategy, workflow automation, and vendor risk assessment. - Its website is Layer3Labs.

Between the lines: - The biggest risk is not only direct use of Chinese models, but hidden exposure through vendors, routers, and “shadow AI.” - That makes procurement and oversight harder, because the model behind a product can be routed, resold, or white-labeled without notice. - Any prompt processed by a Chinese-provider endpoint can fall under China’s National Intelligence Law, which can compel data disclosure to the state. - In July 2026, the House Select Committee on the CCP opened a probe into U.S. firms’ use of these models. - The NDAA already bars DeepSeek from Defense Department systems. - Firms with high shadow AI exposure face an estimated $670,000 breach premium per incident.

What’s next: - Layer3Labs is urging businesses to run a provenance check on every AI tool that touches customer data. - The company says regulated businesses should identify which models are actually processing data before expanding AI use. - More scrutiny from lawmakers and enterprise security teams is likely as Chinese models spread deeper into U.S. AI stacks.

The bottom line: - The core issue is no longer whether businesses use AI, but who controls the model that sees their data.