AI Safety Tracker

xAI

9 notable models 4 with a compute estimate Frontier Artificial Intelligence Framework

xAI has 9 models in Epoch AI's notable models list, 7 of them released since January 2025; the largest training run with a compute estimate is Grok 4, at 5.0e26 FLOP. Its published safety framework is the Frontier Artificial Intelligence Framework, and 1 of its 6 indexed releases since January 2025 had a safety card on the day of release.

  • 5.0e26 FLOP largest training run, Grok 4, 2025 Notable AI Models Epoch AI Licence CC-BY-4.0 Updated weekly Retrieved , today Inclusion is editorial ("notability criteria"), not exhaustive. Compute figures are frequently estimates; check the per-row confidence and notes columns before treating any value as measured. Cite Epoch AI, "Notable AI Models". https://epoch.ai/data/ai-models. Retrieved 28 October 2026 via AI Safety Tracker, https://aisafetytracker.org/developers/xai/.
  • 7 notable models released since January 2025
  • 1 of 6 releases since January 2025 with a system card on the day Release Safety Disclosure Index This site Licence MIT Updated monthly Retrieved , 10 days ago Data JSON CSV Our own reading of the system card, model card or safety report each developer published for each release Epoch AI lists from 2025, joined to Epoch's list. Every cell is what a developer says about its own model under its own framework: whether a card came out with the release, whether it reports dangerous-capability results, which government institutes it names as pre-release testers, and whether it says a risk threshold was reached. None of it is verified. A release Epoch adds after the last review is shown as awaiting review. Cite AI Safety Tracker, "Release Safety Disclosure Index". https://aisafetytracker.org/alignment/#releases. Retrieved 18 October 2026. Notable AI Models Epoch AI Licence CC-BY-4.0 Updated weekly Retrieved , 10 days ago Inclusion is editorial ("notability criteria"), not exhaustive. Compute figures are frequently estimates; check the per-row confidence and notes columns before treating any value as measured. Cite Epoch AI, "Notable AI Models". https://epoch.ai/data/ai-models. Retrieved 18 October 2026 via AI Safety Tracker, https://aisafetytracker.org/developers/xai/.
  • 3 sites it owns in Epoch's data-centre hub

Models

Every model Epoch AI judges notable from xAI, by year, with the largest training run each year where Epoch has a compute estimate.

Notable models by year, with the largest training run each year.
Year Models Models, relative Largest run that year
2023 1 Grok-1, 2.9e24 FLOP
2024 1 Grok-2, 3.0e25 FLOP
2025 5 Grok 4, 5.0e26 FLOP
2026 2 -

Most recent

Notable models, newest first.
Published Model Domain Released as Training compute
2026-09-21 Grok 4.7 Language API only -
2026-02-17 Grok 4.20 Language API only -
2025-11-19 Grok 4.1 Fast Language API only -
2025-11-17 Grok 4.1 Language API only -
2025-07-10 Grok 4 Heavy Language Unreleased -
2025-07-09 Grok 4 Language API only 5.0e26
2025-02-17 Grok 3 Language API only 3.5e26
2024-08-13 Grok-2 Language API only 3.0e25
2023-11-04 Grok-1 Language Open weights 2.9e24

Notability is Epoch's editorial judgement, and compute figures are its estimates, most of them not disclosed by the developer. Epoch's data-centre hub records the owner and user of the Colossus sites as SpaceXAI. Notable AI Models Epoch AI Licence CC-BY-4.0 Updated weekly Retrieved , today Inclusion is editorial ("notability criteria"), not exhaustive. Compute figures are frequently estimates; check the per-row confidence and notes columns before treating any value as measured. Cite Epoch AI, "Notable AI Models". https://epoch.ai/data/ai-models. Retrieved 28 October 2026 via AI Safety Tracker, https://aisafetytracker.org/developers/xai/. Notable AI Models Epoch AI Licence CC-BY-4.0 Updated weekly Retrieved , today Inclusion is editorial ("notability criteria"), not exhaustive. Compute figures are frequently estimates; check the per-row confidence and notes columns before treating any value as measured. Cite Epoch AI, "Notable AI Models". https://epoch.ai/data/ai-models. Retrieved 28 October 2026 via AI Safety Tracker, https://aisafetytracker.org/developers/xai/.

Safety framework and release disclosures

The frontier safety framework xAI has published, and what it published at each release since January 2025.

Framework
Frontier Artificial Intelligence Framework since 2025
Its own scale
Benchmark thresholds for deployment, in two domains
Risk domains
CBRN, loss of control
External evaluation
not stated
Commits to stop
qualified: Commits to a decision process rather than to an outcome.

Version of December 2025, written to comply with California's SB 53. Sets two deployment criteria: an answer rate below 1 in 20 on restricted biology and chemistry queries, and a dishonesty rate below 1 in 2 on the MASK benchmark. Cyber misuse is handled by a refusal policy, with no threshold. States that the benefits of deployment may outweigh a risk a benchmark identifies.

  • 1 of 6 with a system card on the day
  • 3 that no card names
  • 0 naming a government institute that tested before release
  • 0 stated to have reached a threshold in its own framework
xAI releases since January 2025, with the card published for each.
Released Model Card Results Government tested Threshold
2026-09-21 Grok 4.7 The launch post reports refusal and biosafety benchmark scores and links no card. none - - -
2026-02-17 Grok 4.20 49 days later results none named not stated Released with safeguards appropriate for its capability threshold, which is not named
2025-11-19 Grok 4.1 Fast The launch post links no card. none - - -
2025-11-17 Grok 4.1 at release results none named not stated Names no threshold
2025-07-09 Grok 4 42 days later results none named not stated Names no threshold; biology described as the area of highest concern
2025-02-17 Grok 3 The launch post links a draft risk management framework, not a model card. none - - -

Every entry is xAI's own statement about its own models under its own framework. The rules behind each column are on the alignment page. Frontier Safety Framework Index This site Licence MIT Updated quarterly Retrieved , 10 days ago Data JSON CSV Our own reading of each developer's published safety framework and model cards. Every field is what the developer says about itself: these are self-assessments under self-written frameworks with no common scale and no external audit, and they are indexed here for exactly that reason. Not a ranking, and not a verification. Cite AI Safety Tracker, "Frontier Safety Framework Index". https://aisafetytracker.org/alignment/#frameworks. Retrieved 18 October 2026. Release Safety Disclosure Index This site Licence MIT Updated monthly Retrieved , 10 days ago Data JSON CSV Our own reading of the system card, model card or safety report each developer published for each release Epoch AI lists from 2025, joined to Epoch's list. Every cell is what a developer says about its own model under its own framework: whether a card came out with the release, whether it reports dangerous-capability results, which government institutes it names as pre-release testers, and whether it says a risk threshold was reached. None of it is verified. A release Epoch adds after the last review is shown as awaiting review. Cite AI Safety Tracker, "Release Safety Disclosure Index". https://aisafetytracker.org/alignment/#releases. Retrieved 18 October 2026. Notable AI Models Epoch AI Licence CC-BY-4.0 Updated weekly Retrieved , 10 days ago Inclusion is editorial ("notability criteria"), not exhaustive. Compute figures are frequently estimates; check the per-row confidence and notes columns before treating any value as measured. Cite Epoch AI, "Notable AI Models". https://epoch.ai/data/ai-models. Retrieved 18 October 2026 via AI Safety Tracker, https://aisafetytracker.org/developers/xai/.

Its models against the compute thresholds

How many of xAI's models with a compute estimate sit at or above each training-compute threshold written into an instrument, and the first to cross it.

Training-compute thresholds and this developer's models above each.
Instrument Threshold Status Its models above First of them to cross
Regulation (EU) 2024/1689, Article 51(2) European Union 1e25 in force 3 Grok-2, 2024-08-13
SB 53, Transparency in Frontier Artificial Intelligence Act United States (California) 1e26 in force 2 Grok 3, 2025-02-17
Enforcement Decree of the AI Basic Act, Article 23 South Korea 1e26 in force 2 Grok 3, 2025-02-17
Executive Order 14110, section 4.2 United States (federal) 1e26 revoked 2 Grok 3, 2025-02-17
SB 1047, Safe and Secure Innovation for Frontier AI Models Act United States (California) 1e26 vetoed 2 Grok 3, 2025-02-17
RAISE Act, Responsible AI Safety and Education Act United States (New York) 1e26 enacted 2 Grok 3, 2025-02-17

Arithmetic on Epoch's compute estimates against the number in each instrument, not a legal finding about any model. The full timeline is on the capability page. Compute Threshold Index This site Licence MIT Updated quarterly Retrieved , 5 days ago Data JSON CSV Training-compute thresholds written into law, executive action or published policy, with the text that sets each one. Whether a given model crosses a threshold here is arithmetic on Epoch's compute estimates, most of which are estimates rather than disclosures, and is not a legal finding about any model or developer. Cite AI Safety Tracker, "Compute Threshold Index". https://aisafetytracker.org/capability/#thresholds. Retrieved 23 October 2026. Notable AI Models Epoch AI Licence CC-BY-4.0 Updated weekly Retrieved , 5 days ago Inclusion is editorial ("notability criteria"), not exhaustive. Compute figures are frequently estimates; check the per-row confidence and notes columns before treating any value as measured. Cite Epoch AI, "Notable AI Models". https://epoch.ai/data/ai-models. Retrieved 23 October 2026 via AI Safety Tracker, https://aisafetytracker.org/developers/xai/.

Datacentres

Sites in Epoch AI's data-centre hub that xAI owns or is named as using, largest planned IT power first. Those it owns plan 1.9 GW of IT power between them.

Datacentre sites this developer owns or uses, with power now and planned.
Site Role Country Stage IT power now Planned
Colossus 2 owner, confident United States Expanding 946 MW 1.5 GW
Colossus 1 owner, confident United States Operating 340 MW 340 MW
xAI QTS Atlanta owner, confident United States Operating 17 MW 17 MW

Power is Epoch's estimate from imagery and permits, IT power where it states one. Confidence is Epoch's own label for each owner or user. AI Data Centers Epoch AI Licence CC-BY-4.0 Updated several times a week Retrieved , today The largest AI sites Epoch has found, mostly in the United States. Epoch estimated in September 2026 that they hold 44% of the world's deployed AI compute, with a 90% interval of 23% to 81%. Power, compute and cost are Epoch's estimates from satellite imagery, permits and company statements; four in five IT power estimates fall within a factor of 1.4 of the true value. The owner is the owner of the chips, not necessarily of the building. Capacity after the date of retrieval is Epoch's projection. Coordinates are read from the hub's map page, which publishes them; the downloads do not. Cite Epoch AI, "AI Data Centers". https://epoch.ai/data/ai-data-centers. Retrieved 28 October 2026 via AI Safety Tracker, https://aisafetytracker.org/developers/xai/. AI Datacentre Index This site Licence MIT Updated quarterly Retrieved , today Data JSON AI datacentre sites that Epoch AI's hub does not hold, recorded from the statements of developers, named tenants and planning authorities. Australia only so far. A site is included only where a primary source says it is built for AI compute or names the AI deployment inside it. Capacity is as the developer states it, IT or facility power as labelled, and is not an estimate; most of it is proposed and not yet approved. Coordinates are this site's placement of each stated address or area. Cite AI Safety Tracker, "AI Datacentre Index". https://aisafetytracker.org/datacentres/#added. Retrieved 28 October 2026.

Energy and emissions

What xAI has published about the energy behind its models, and what permits and press reporting add.

Training energy or emissions Not disclosed
No energy or emissions figure for any model.
Where it trains and serves Reported by others
Grok 3 was trained on Colossus, a converted factory in Memphis, Tennessee. R&D World
What powers those sites Reported by others
Colossus 1: 15 on-site gas turbines, 247 MW, permitted in July 2025. Around 35 ran before the permit was granted. Colossus 2: dozens of 35 MW gas turbines across the state line in Southaven, Mississippi, permitted in March 2026. DCD WDAM
Energy per prompt Not disclosed
No per-prompt figure.

"Published" means the developer's own statement; "reported by others" means a permit, a regulator or the press. A company's clean-energy claims cover its whole operation, never one model. Environmental Disclosure Index This site Licence MIT Updated quarterly Retrieved , 5 days ago Data 7 datasets Our own reading of what frontier developers and the operators of their data centres have published about training energy, emissions, power sources and energy per prompt, with permits and press reporting marked separately from company statements. Most cells record an absence. Company figures are self-reported and mostly unaudited, and market-based emissions reflect contracts rather than the grid at the hour of use. Cite AI Safety Tracker, "Environmental Disclosure Index". https://aisafetytracker.org/environment/. Retrieved 23 October 2026. Environmental Disclosure Index This site Licence MIT Updated quarterly Retrieved , 5 days ago Data 7 datasets Our own reading of what frontier developers and the operators of their data centres have published about training energy, emissions, power sources and energy per prompt, with permits and press reporting marked separately from company statements. Most cells record an absence. Company figures are self-reported and mostly unaudited, and market-based emissions reflect contracts rather than the grid at the hour of use. Cite AI Safety Tracker, "Environmental Disclosure Index". https://aisafetytracker.org/environment/. Retrieved 23 October 2026.

Usage

The token volumes and user counts xAI has stated, each in its own scope.

  • 117 million monthly users, Grok, as of March 2026 source

Volumes are normalised to a month and are comparable only within one company's own scope. Every series with its scope is on the usage page. AI Usage Disclosure Index This site Licence MIT Updated quarterly Retrieved , 5 days ago Data 3 datasets Our own compilation of the token volumes, user counts and shares of use that companies and studies have put on the record, each linked to where it was stated. Scopes, units and token definitions differ between companies, so no two figures are comparable without the scope printed beside each. Figures known only through press reporting are marked as such. Not a market share estimate, and not a measure of any company's actual volume beyond what it chose to state. Cite AI Safety Tracker, "AI Usage Disclosure Index". https://aisafetytracker.org/usage/. Retrieved 23 October 2026. AI Usage Disclosure Index This site Licence MIT Updated quarterly Retrieved , 5 days ago Data 3 datasets Our own compilation of the token volumes, user counts and shares of use that companies and studies have put on the record, each linked to where it was stated. Scopes, units and token definitions differ between companies, so no two figures are comparable without the scope printed beside each. Figures known only through press reporting are marked as such. Not a market share estimate, and not a measure of any company's actual volume beyond what it chose to state. Cite AI Safety Tracker, "AI Usage Disclosure Index". https://aisafetytracker.org/usage/. Retrieved 23 October 2026.

Not recorded for xAI: a stated token volume.