AI Governance Institute
← News
Research2026-10-26

AI Training Labor Map Links 13 Vendors and 31 Countries, Exposing Supply Chain Gap

What happened

Cunyan Ma, an undergraduate at Brown University, published an interactive power map as part of ongoing research into AI labor supply chains, as reported in Brown student maps the hidden global labor powering AI. The map links 13 data labeling companies to 141 named corporate customers across 31 countries. It makes visible the annotation workers who produce the labeled datasets used to train commercial AI models. Ma drew on existing public databases and original data collection, arguing that the opacity of these labor relationships is structural rather than incidental. The research frames the concentration of low-wage data work in the Global South as a form of AI colonialism. It raises direct questions about whether corporate AI supply chain disclosures accurately reflect these dependencies.

Why it matters

  • ·Enterprise AI governance programs typically conduct due diligence on direct model vendors but rarely extend that review to data annotation subcontractors. This map names 141 customer organizations, creating a public record that regulators, investors, and litigants can reference when assessing whether supply chain disclosures are adequate.
  • ·The EU AI Act (Regulation (EU) 2024/1689) requires providers of high-risk AI systems to document training data practices, including third-party data sources. If annotation labor conditions are not documented, compliance teams face a gap between what the regulation expects and what the vendor's data sheet actually shows.
  • ·ESG and investor disclosure programs that reference responsible AI sourcing now face a credibility test. A published, citable map of labor conditions in the annotation supply chain makes it harder to claim that human rights risk assessments have been completed without extending them to data labeling vendors.

Stay ahead of stories like this

Get every Global AI governance development like this one, plus the rest of the week's developments. Every Thursday.

Free every Thursday. Unsubscribe anytime.

Governance controls affected

What to do now

  • ☐Ask your AI model and platform vendors to identify which data annotation companies they used or contracted, and in which countries those workers operate.
  • ☐Review your vendor due diligence questionnaires to confirm they ask about subcontracted data labeling, not only direct data sources.
  • ☐Cross-reference your current AI vendors against the 141 customer organizations named in the Brown University map and flag any matches for deeper review.
  • ☐Check whether your ESG or human rights disclosure program covers data annotation labor in the AI supply chain, and update it if it does not.
  • ☐Confirm that your training data provenance documentation, for any models your organization trains or fine-tunes, captures the identity and location of annotation providers, not just the dataset name.

What to watch next

The EU AI Act's technical documentation requirements for high-risk systems are becoming more specific as enforcement guidance develops. Labor conditions in the training data supply chain are a foreseeable area of examiner interest. Human rights due diligence laws in Germany, France, and Norway already require large companies to assess supplier labor conditions, and AI annotation vendors are not clearly excluded from that scope. Compliance teams should also watch for investor-side pressure. As ESG frameworks mature, the absence of annotation labor disclosures in responsible AI reporting may attract the same scrutiny that opaque garment or mineral supply chains have faced in other sectors.

Related Coverage

Corporate Policy2026-11-10

Anthropic's Fable 5.2 and Mythos 5.2 Create a Two-Tier Access Control Problem

Anthropic released Claude Fable 5.2 and Claude Mythos 5.2 on November 9, 2026, two variants of the same frontier model optimized for advanced technical work. Fable 5.2 is available generally with enhanced cybersecurity and biosecurity restrictions. Mythos 5.2 carries fewer constraints and is restricted to organizations that pass Anthropic's Life Sciences and Cyber Verification Programs. Compliance teams must now account for which variant their organization or vendors can access, and whether internal controls justify that access tier.

Enforcement2026-11-10

ICO Finds Training Data Transparency Gaps at Ten Foundation Model Developers

The UK Information Commissioner's Office completed a two-year supervision programme covering ten major foundation model developers. It found that all ten made or committed to make data protection improvements, with training data transparency and personal information handling identified as the most persistent concerns. The findings signal that regulators now treat the full AI supply chain as within data protection scope.

Research2026-11-14

Blackwell GPU Fingerprints Found in Six Chinese Frontier Model Weights

Forensic analysis by Unemployment Labs found numerical patterns in publicly released model weights from DeepSeek, Moonshot AI, MiniMax, and Ant Group. These patterns match NVIDIA Blackwell graphics processing unit (GPU) hardware, which requires a U.S. export license to ship to China. Six models released since April 2026 carry Blackwell fingerprints, while earlier models from the same labs match the older Hopper generation. The researchers explicitly note they cannot determine where the chips are located, how access was obtained, or whether export regulations were violated.