Google DeepMind

Framework

Frontier Safety Framework since 2024

Its own scale

Critical Capability Levels per domain, with lower Tracked Capability Levels for some

Risk domains

CBRN, cyber, manipulation, AI R&D, loss of control

External evaluation

not stated

Commits to stop

qualified: Commits to a decision process rather than to an outcome.

Version 3.1 took effect on 17 April 2026. Adds Tracked Capability Levels below the critical ones, for CBRN and for a domain that now merges machine-learning R&D with misalignment. Risk acceptance weighs what other publicly available models can do, and for misuse risks applies to external deployment only, not to internal use or further development.

• 6 of 8 with a system card on the day
• 0 that no card names
• 0 naming a government institute that tested before release
• 2 stated to have reached a threshold in its own framework

Every entry is Google DeepMind's own statement about its own models under its own framework. The rules behind each column are on the alignment page. Frontier Safety Framework Index This site Licence MIT Updated quarterly Retrieved 2026-10-18, 10 days ago Data JSON CSV Our own reading of each developer's published safety framework and model cards. Every field is what the developer says about itself: these are self-assessments under self-written frameworks with no common scale and no external audit, and they are indexed here for exactly that reason. Not a ranking, and not a verification. Cite AI Safety Tracker, "Frontier Safety Framework Index". https://aisafetytracker.org/alignment/#frameworks. Retrieved 18 October 2026. Release Safety Disclosure Index This site Licence MIT Updated monthly Retrieved 2026-10-18, 10 days ago Data JSON CSV Our own reading of the system card, model card or safety report each developer published for each release Epoch AI lists from 2025, joined to Epoch's list. Every cell is what a developer says about its own model under its own framework: whether a card came out with the release, whether it reports dangerous-capability results, which government institutes it names as pre-release testers, and whether it says a risk threshold was reached. None of it is verified. A release Epoch adds after the last review is shown as awaiting review. Cite AI Safety Tracker, "Release Safety Disclosure Index". https://aisafetytracker.org/alignment/#releases. Retrieved 18 October 2026. Notable AI Models Epoch AI Licence CC-BY-4.0 Updated weekly Retrieved 2026-10-18, 10 days ago Inclusion is editorial ("notability criteria"), not exhaustive. Compute figures are frequently estimates; check the per-row confidence and notes columns before treating any value as measured. Cite Epoch AI, "Notable AI Models". https://epoch.ai/data/ai-models. Retrieved 18 October 2026 via AI Safety Tracker, https://aisafetytracker.org/developers/google-deepmind/.

Power is Epoch's estimate from imagery and permits, IT power where it states one. Confidence is Epoch's own label for each owner or user. AI Data Centers Epoch AI Licence CC-BY-4.0 Updated several times a week Retrieved 2026-10-28, today The largest AI sites Epoch has found, mostly in the United States. Epoch estimated in September 2026 that they hold 44% of the world's deployed AI compute, with a 90% interval of 23% to 81%. Power, compute and cost are Epoch's estimates from satellite imagery, permits and company statements; four in five IT power estimates fall within a factor of 1.4 of the true value. The owner is the owner of the chips, not necessarily of the building. Capacity after the date of retrieval is Epoch's projection. Coordinates are read from the hub's map page, which publishes them; the downloads do not. Cite Epoch AI, "AI Data Centers". https://epoch.ai/data/ai-data-centers. Retrieved 28 October 2026 via AI Safety Tracker, https://aisafetytracker.org/developers/google-deepmind/. AI Datacentre Index This site Licence MIT Updated quarterly Retrieved 2026-10-28, today Data JSON AI datacentre sites that Epoch AI's hub does not hold, recorded from the statements of developers, named tenants and planning authorities. Australia only so far. A site is included only where a primary source says it is built for AI compute or names the AI deployment inside it. Capacity is as the developer states it, IT or facility power as labelled, and is not an estimate; most of it is proposed and not yet approved. Coordinates are this site's placement of each stated address or area. Cite AI Safety Tracker, "AI Datacentre Index". https://aisafetytracker.org/datacentres/#added. Retrieved 28 October 2026.

• 3.2 quadrillion tokens a month, Google, all products, as of May 2026 source
• 964 trillion tokens a month, Google, API only, as of July 2026 source
• 2.5 billion monthly users, Google AI Overviews, as of May 2026 source
• 1 billion monthly users, Google AI Mode, as of May 2026 source
• 950 million monthly users, Gemini app, as of July 2026 source

Volumes are normalised to a month and are comparable only within one company's own scope. Every series with its scope is on the usage page. AI Usage Disclosure Index This site Licence MIT Updated quarterly Retrieved 2026-10-23, 5 days ago Data 3 datasets Our own compilation of the token volumes, user counts and shares of use that companies and studies have put on the record, each linked to where it was stated. Scopes, units and token definitions differ between companies, so no two figures are comparable without the scope printed beside each. Figures known only through press reporting are marked as such. Not a market share estimate, and not a measure of any company's actual volume beyond what it chose to state. Cite AI Safety Tracker, "AI Usage Disclosure Index". https://aisafetytracker.org/usage/. Retrieved 23 October 2026. AI Usage Disclosure Index This site Licence MIT Updated quarterly Retrieved 2026-10-23, 5 days ago Data 3 datasets Our own compilation of the token volumes, user counts and shares of use that companies and studies have put on the record, each linked to where it was stated. Scopes, units and token definitions differ between companies, so no two figures are comparable without the scope printed beside each. Figures known only through press reporting are marked as such. Not a market share estimate, and not a measure of any company's actual volume beyond what it chose to state. Cite AI Safety Tracker, "AI Usage Disclosure Index". https://aisafetytracker.org/usage/. Retrieved 23 October 2026.