Loading the catalogue…
🇦🇪United Arab Emirates · Mixed · 0 models
Technology Innovation Institute
Technology Innovation Institute (TII) is wholly owned by the Abu Dhabi government through the Advanced Technology Research Council (ATRC), making it a sovereign-state-controlled AI lab with a defence-adjacent research mandate spanning Directed Energy, Autonomous Robotics, Cryptography, and Secure Systems — a posture EU regulated enterprises must weigh carefully. Its Falcon model family (up to 180B parameters, now including the Falcon-H1 hybrid series, Falcon-H1R reasoning models, and the Falcon Perception multimodal model) releases open weights under a patchwork of Apache 2.0-based licences, some of which carry commercial hosting restrictions and royalty clauses that are not OSI-certified. TII has published no EU AI Act compliance statement, signed no GPAI Code of Practice, and identified no EU Article 27 GDPR representative, despite Falcon models being actively placed on the EU market via HuggingFace — these are material gaps for EU regulated deployers, though self-hosted EEA deployment of genuine Apache 2.0 variants (Falcon 7B/40B) remains a viable sovereign inference path.
AI Act 51/100Outside CLOUD Act
Stav AI Act verdict
governancehigh
TII is 100% owned by the Abu Dhabi government via ATRC, whose Secretary General is a direct adviser to the UAE President. This is a sovereign-state-controlled AI lab with a defence-adjacent research mandate (Directed Energy, Autonomous Robotics, Cryptography, Secure Systems). EU regulated enterprises — particularly in finance, government, and critical infrastructure — must conduct enhanced geopolitical due diligence before production deployment.
compliancehigh
No EU AI Act compliance statement published, no GPAI Code of Practice signatory status, and no Article 53-compliant technical documentation package. Falcon-H1 (released May 2025), Falcon H1R (January 2026), and Falcon Perception (April 2026) are in scope for GPAI baseline obligations (effective August 2025). Commission enforcement powers (fines up to €15M or 3% global turnover) begin 2 August 2026. Non-Code-of-Practice providers must submit compliance reports to the EU AI Office under the July 2025 GPAI Guidelines.
privacyhigh
The directly-retrieved Falcon LLM privacy policy explicitly scopes to UAE and Gulf-region data protection laws only, with no mention of GDPR. UAE does not hold EU adequacy status. No SCCs, BCRs, or EU Article 27 GDPR representative have been identified, despite Falcon being actively placed on the EU market and GDPR Article 3(2) extra-territorial application being unambiguously triggered. EU enterprises processing personal data via Falcon (including self-hosted on EU infrastructure where TII's policy governs model behaviour) face an unresolved legal basis gap.
compliancemedium
Falcon licence patchwork: Falcon 180B requires separate TII consent for managed-service hosting; Falcon 2/3 series carries TII custom licences with potential revenue-based royalty clauses (commercial agreement required for attributable revenues above $1M/year) contested as non-OSI-compliant. EU enterprises generating substantial revenue from Falcon-based commercial services face material, non-obvious contractual obligations requiring per-model legal review before deployment.
jurisdictionmedium
Inference via AWS Bedrock (per the May 2025 TII/AWS partnership) routes EU customer data through US AWS infrastructure, introducing CLOUD Act exposure at the inference layer even though TII itself is not CLOUD Act exposed. EU enterprises using AWS Bedrock to run Falcon models should account for this in Transfer Impact Assessments and consider self-hosted EEA deployment instead.
governancemedium
TII's defence-adjacent research portfolio (Directed Energy, Autonomous Robotics, Cryptography, Secure Systems) places it in dual-use technology territory under EU Regulation 2021/821. EU enterprises — particularly in regulated sectors including defence, critical infrastructure, and dual-use manufacturing — should verify that deploying Falcon models or engaging with TII commercially does not trigger dual-use export control considerations.
privacymedium
RefinedWeb (Falcon's primary training dataset, built on CommonCrawl web scrapes) may contain PII, as flagged by HuggingFace's automated Presidio scan. No formal GDPR-compliant opt-out mechanism for EU data subjects has been published; only an ad-hoc email removal request is provided (falconllm@tii.ae). EU enterprises deploying Falcon models in contexts where training data provenance matters (e.g., legal, healthcare) should conduct training data due diligence.
securitylow
No public bug bounty, responsible disclosure policy, SOC 2, or ISO 27001 certifications have been identified for TII or the Falcon LLM platform. The privacy policy references 'regular security assessments and audits' without naming a certifier. For an organisation releasing widely deployed AI models and conducting cryptography and secure systems research, the absence of published security governance artefacts is a notable gap.
Stav AI Act assessment
Editorial assessment, not legal advice. Stav's risk ratings, scores, and verdicts are our own analysis of publicly available information and may be incomplete or out of date. Verify independently before making compliance or procurement decisions.
Safeguards in place
- transparencyUnknown
RefinedWeb — the Falcon pre-training dataset — is fully open-released on HuggingFace under ODC-By 1.0, accompanied by a peer-reviewed arXiv paper (arXiv:2306.01116) describing the data pipeline in detail. This level of training data transparency is significantly above the industry norm and materially supports self-hosted EU deployments where data provenance must be auditable.
- transparencyUnknown
All major Falcon releases include published HuggingFace model cards and technical arXiv reports: Falcon-H1 (arXiv:2507.22448, July 2025), Falcon-H1R 7B (blog post January 2026), Falcon Mamba (arXiv:2410.05355), Falcon2-11B Technical Report (2024). Each major generation is accompanied by technical documentation.
- transparencyUnknown
The directly-retrieved Falcon LLM privacy policy provides granular data retention schedules: transient prompts discarded after response by default; technical logs 30–90 days then deleted; opt-in-only training data use with consent-withdrawal rights. No data sale; no direct marketing use of personal data. These are meaningful privacy governance commitments, even without GDPR framing.
- communityUnknown
Falcon 40B held the #1 position on the HuggingFace Open LLM Leaderboard for two months after its May 2023 launch. Falcon-H1 outperforms models twice its parameter count on key benchmarks. Falcon Perception (~600M parameters) challenges prevailing multimodal architectures. Over 12 million developers have adopted Falcon models across all generations. Broad, multi-year community validation.
- securityUnknown
TII developed advanced cryptographic AI capabilities (multi-party computation, fully homomorphic encryption, post-quantum cryptography), validated by the May 2026 acquisition of this technology by OPAQUE Systems — a confidential computing company. This demonstrates meaningful internal security research depth, though the acquired cryptographic capabilities are now no longer TII-operated.
- stability
Privacy posture
- Privacy policy
- https://careers.tii.ae/content/Privacy-Policy/?locale=en_GB
- Flagged issues
- 2
- The directly-retrieved Falcon LLM privacy policy explicitly scopes to UAE and Gulf-region data protection laws only, with no mention of GDPR. UAE does not hold EU adequacy status. No SCCs, BCRs, or EU Article 27 GDPR representative have been identified, despite Falcon being actively placed on the EU market and GDPR Article 3(2) extra-territorial application being unambiguously triggered. EU enterprises processing personal data via Falcon (including self-hosted on EU infrastructure where TII's policy governs model behaviour) face an unresolved legal basis gap.high
- RefinedWeb (Falcon's primary training dataset, built on CommonCrawl web scrapes) may contain PII, as flagged by HuggingFace's automated Presidio scan. No formal GDPR-compliant opt-out mechanism for EU data subjects has been published; only an ad-hoc email removal request is provided (falconllm@tii.ae). EU enterprises deploying Falcon models in contexts where training data provenance matters (e.g., legal, healthcare) should conduct training data due diligence.medium
Privacy policy review
Identity & profile
- Country
- 🇦🇪 United Arab Emirates
- Open-weights policy
- Mixed
- Models in catalogue
- 0
- Website
- https://www.tii.ae
- GitHub
- https://github.com/tiiuae
- HuggingFace
- tiiuae · 2,020 followers
- HF published
- 137 models · 14 datasets · 5 papers
Creator profile
About Technology Innovation Institute
Technology Innovation Institute (TII) is the applied research arm of Abu Dhabi's Advanced Technology Research Council (ATRC), a UAE government body — giving it full sovereign-state backing but also direct state affiliation that EU regulated customers should assess carefully. Its Falcon series of open-weights models is distributed under custom Apache 2.0-based licences that carry commercial royalty clauses for high-revenue users, making the 'open source' label legally contested. No EU AI Act compliance statement, no verified GPAI Code of Practice signatory status, and no published DPO contact have been identified, which are meaningful gaps for enterprises deploying Falcon models in regulated EU contexts.
Stav editorial summary
COMPLIANCE & TRUST
Stav’s creator score.
Stav compliance has not yet scored Technology Innovation Institute. Scores are published once the policy review and infrastructure assessment complete.
Findings
Findings from privacy & terms
Citations gathered when the Compliance Curator last reviewed this creator’s public-facing documents. Grouped by source so the picture stays auditable.
huggingface.co · 4 citations
“Falcon-180B was trained on up to 4,096 A100 40GB GPUs, using a 3D parallelism strategy (TP=8, PP=8, DP=64) combined with ZeRO. Training started in ear...”
“The TII Falcon LLM License is not a free software license under the definitions of the FSF or OSI. It imposes restrictions on commercial use, requires...”
“It is made available under the Apache 2.0 license.”
Editorial sources
- Technology Innovation Institute — Grokipedia
The Technology Innovation Institute (TII) is a leading global applied research institute headquartered in Abu Dhabi, United Arab Emirates, established...
- About Us | Technology Innovation Institute
Our rigorous discovery and inquiry-based approach helps to forge new and disruptive breakthroughs in: ... We are part of Abu Dhabi Government’s Advanc...
- Technology Innovation Institute - Wikipedia
Dr Najwa Aaraj is currently serving as the 2nd CEO of the institute, following Dr.
- Introducing the Technology Innovation Institute’s Falcon Perception Making Advanced AI accessible and Available to Everyone, Everywhere
Today the Falcon Perception, Falcon‑H1‑Tiny‑R, Falcon H1R 7B, Falcon-H1-Arabic, Falcon Arabic, Falcon-E, Falcon-H1, Falcon 3, Falcon Mamba 7B, Falcon ...
- UAE unveils Falcon Perception in push for AI independence | Computer Weekly
With approximately 600 million parameters, Falcon Perception is notably more compact than many prominent multimodal models, which often use several bi...
- UAE’s TII challenges big tech dominance with open source Falcon AI models | Computer Weekly
At the centre of this strategy is Falcon, TII’s family of large language models (LLMs), which have consistently ranked among the world’s top-performin...
- AI71
TII Falcon LLM License: A fork of Apache 2.0, this license allows researchers and developers to freely use TII's models for research and personal purp...
- AI Act | Shaping Europe's digital future - European Union
Reference citations
- Technology Innovation Institute — Grokipedia
The Technology Innovation Institute (TII) is a leading global applied research institute headquartered in Abu Dhabi, United Arab Emirates, established...
- Technology Innovation Institute - Wikipedia
Dr Najwa Aaraj is currently serving as the 2nd CEO of the institute, following Dr. Ray O. Johnson's tenure as the inaugural CEO until 2024.
- OPAQUE Acquires Abu Dhabi-Developed Cryptographic AI Technology from TII, Extending Confidential AI Across the Full Lifecycle with Post-Quantum Protection
The acquisition was overseen by H.E. Faisal Al Bannai, Adviser to UAE President His Highness Sheikh Mohamed bin Zayed Al Nahyan and Secretary General ...
- tiiuae/falcon-180B · Hugging Face
Falcon-180B was trained on up to 4,096 A100 40GB GPUs, using a 3D parallelism strategy (TP=8, PP=8, DP=64) combined with ZeRO. Training started in ear...
- Introducing the Technology Innovation Institute’s Falcon Perception Making Advanced AI accessible and Available to Everyone, Everywhere
That is why we decided to open source or open access all our Falcon models.
- tiiuae/Falcon3-1B-Base · Falcon LLM is proprietary license, while deceptfully advertised as "Open Source"
The TII Falcon LLM License is not a free software license under the definitions of the FSF or OSI. It imposes restrictions on commercial use, requires...
- tiiuae/falcon-7b · Hugging Face
It is made available under the Apache 2.0 license.