AI Governance Institute
← News
Research2026-07-31

ITU Report Sets Global Baseline for Pre-Deployment Testing and Watermarking Norms

What happened

The ITU released the Annual AI Governance Report 2025, a global synthesis of emerging AI governance norms covering pre-deployment registration, licensing proposals, mandatory safety testing, red-teaming requirements, and post-deployment transparency obligations such as content watermarking. The report is non-binding but carries significant weight as a credible multilateral reference point that regulators and standards bodies across jurisdictions are likely to cite. It arrives as multiple frameworks, including the EU AI Act Implementation Timeline, the OECD AI Principles, and UNESCO Recommendation on the Ethics of Artificial Intelligence, are moving pre-deployment testing and provenance disclosure from voluntary commitments toward enforceable requirements. For enterprises, the report consolidates three governance pressure points into a single reference: the adequacy of model release gates, the evidentiary quality of safety evaluations, and the maturity of content provenance controls. The publication follows growing scrutiny of whether formal pre-deployment testing norms translate into enforceable audit evidence, a gap highlighted by recent case studies exposing documentation and accountability gaps at AI release decision points.

Why it matters

  • ·The report signals that pre-deployment testing and red-teaming are transitioning from best-practice guidance to anticipated regulatory requirements. Compliance programs that treat safety evaluations as informal or ad hoc reviews now face increasing exposure as regulators in the EU, the UK, and several US states look to frameworks like this one to define what adequate pre-deployment controls look like.
  • ·Watermarking and content provenance requirements are explicitly framed in the report as post-deployment transparency obligations, not optional features. Enterprises that have not yet assessed their readiness to label and track AI-generated content risk being underprepared for mandatory disclosure regimes emerging under instruments such as the EU Code of Practice on Marking and Labelling of AI-Generated Content and parallel measures in several jurisdictions.
  • ·The report's treatment of model registration and licensing proposals elevates the governance risk for organizations that deploy models without formal intake and approval records. Regulatory bodies examining enterprise AI programs will increasingly expect documented approval gates, audit trails from safety evaluations, and evidence that red-teaming results informed deployment decisions, not merely that testing occurred.

Governance controls affected

CHM-002Model Deployment Gate ProcessCMP-002International AI Standards Monitoring WorkflowCMP-006AI Content Watermarking and Labeling ComplianceMGV-006RAI Benchmark-Aligned Evaluation FrameworkSAF-005Harmful Content FilteringSAF-006Post-Deployment Adversarial Testing Cadence

What to do now

  • ☐Map your current pre-deployment testing documentation against the report's red-teaming and safety evaluation norms to identify gaps that could become audit findings under emerging mandatory regimes.
  • ☐Review your model release gate process to confirm it produces audit-ready evidence of safety evaluations, not just internal sign-off records, before models reach production.
  • ☐Assess whether your AI-generated content workflows support watermarking or provenance labeling at scale, and identify tools or process changes needed to meet anticipated mandatory disclosure requirements.
  • ☐Update your multi-jurisdiction compliance mapping to include the ITU report as a reference document alongside binding frameworks, so your regulatory horizon scanning captures where convergent norms are forming.
  • ☐Brief your board or AI governance committee on the report's registration and licensing proposals as forward-looking regulatory signals that may affect your model intake and vendor management programs within the next one to two years.

What to watch next

Compliance teams should monitor whether the ITU report's pre-deployment testing norms are cited in upcoming enforcement guidance or rulemaking by the EU AI Office, national competent authorities under the EU AI Act Implementation Timeline, or US federal agencies developing sector-specific AI requirements. The convergence between this report and the Singapore Consensus on Global AI Safety Research Priorities suggests that multilateral alignment on mandatory safety testing is accelerating. Organizations in regulated sectors, particularly financial services, healthcare, and critical infrastructure, should treat 2026 as the window to formalize their pre-deployment evaluation programs before voluntary norms harden into enforceable obligations.

Stay ahead of stories like this

Get every Global AI governance development like this one, plus the rest of the week's developments. Every Thursday.

Free every Thursday. Unsubscribe anytime.

Related Coverage

Research2026-10-14

13% Jailbreak Rate on OpenAI and Google Image Models Exposes Vendor Safety Gap

Safety researchers at White Circle published a preprint on DALL-E 3, GPT-Image-2, and Google's image models. The models can be manipulated into generating explicit content roughly 13 percent of the time. Only widely available tools are required. The attack method is called RISE and needs no specialized access or custom software. Newer model versions from both companies tested as more vulnerable than their predecessors.

Research2026-10-16

A $40K AI Run Cracked Chrome. Offensive AI Risk Is Now a Board Issue.

Security research firm Xbow used OpenAI's GPT-5.6 Sol over six days, spending roughly $40,000, to find a chained vulnerability in Google Chrome affecting over one billion Windows machines. Google patched the flaws and awarded Xbow a $250,000 bug bounty. The episode demonstrates that finding critical software flaws using publicly available AI is now within reach of small, modestly funded teams.

Research2026-10-16

US-China Model Safety Divergence Creates a Compliance Planning Gap

A Brookings Institution analysis published October 15, 2026 examines how the United States and China are developing distinct approaches to regulating advanced AI models for safety. Both regimes require pre-deployment and ongoing safety testing for risks including biological, chemical, nuclear, and critical-infrastructure threats. The divergence means organizations operating in both markets face conflicting obligations with no common standard to satisfy both at once.