Thinking Machines LabNEW recently added
- Rank
- Score
- 63/149
- 45 out of 100
Thinking Machines Lab is an American artificial intelligence company founded in 2025 in San Francisco by Mira Murati, the former chief technology officer of OpenAI. It develops the Inkling family of open-weights models and offers Tinker, a service for fine-tuning and running models through an API.
Is Inkling safe?
Inkling scores 45 out of 100 and ranks 63 of 149. Its strongest category is Safety, and its weakest category is Security.
How is Inkling scored?
Inkling is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
50Points for each confirmed yes.
- Yes
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim50/50“For CBRN and cyber, we assessed knowledge and procedural uplift through internal evaluations, external testing, and refusal-suppressed varia…” MoreLess
“For CBRN and cyber, we assessed knowledge and procedural uplift through internal evaluations, external testing, and refusal-suppressed variants intended to estimate latent capability with safeguards removed.”
thinkingmachines.ai model card (opens in a new tab) · 2 Nov 2026 - No
Did an outside organisation test the model before release?
Company claim0/50thinkingmachines.ai model card (opens in a new tab) · 2 Nov 2026
Safety test results
Average used74.1This outside rating doesn't cover this company, so the average of the companies it covers is used.
Incident record
Not enough dataProtecting children
50Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50thinkingmachines.ai model card (opens in a new tab) · 2 Nov 2026 - Yes
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim50/50“Our Services are not intended for or directed at children under the age of 13 and we do not knowingly collect personal information about the…” MoreLess
“Our Services are not intended for or directed at children under the age of 13 and we do not knowingly collect personal information about them.”
Model documentation
100Points for each confirmed yes.
- Yes
Does the model card describe what the model can do?
Company claim25/25“Inkling is a general-purpose multimodal model that accepts text, image and audio inputs and generates text outputs.”
thinkingmachines.ai model card (opens in a new tab) · 2 Nov 2026 - Yes
Does the model card report test results?
Company claim25/25“5. Evaluations” (results shown in a table on the source page)
thinkingmachines.ai model card (opens in a new tab) · 2 Nov 2026 - Yes
Does the model card state the model's limitations?
Company claim25/25“Inkling may exhibit general limitations common to foundation models, including hallucination (generating plausible but factually incorrect o…” MoreLess
“Inkling may exhibit general limitations common to foundation models, including hallucination (generating plausible but factually incorrect or unsupported content), occasional failures to follow instructions precisely, and degraded performance in long multi-turn conversations.”
thinkingmachines.ai model card (opens in a new tab) · 2 Nov 2026 - Yes
Does the model card describe safety safeguards?
Company claim25/25“Data curation includes cleaning, processing, and modifying datasets. These processing steps, which vary by data type, may include deduplicat…” MoreLess
“Data curation includes cleaning, processing, and modifying datasets. These processing steps, which vary by data type, may include deduplication and filtering to remove junk or other low-quality data, or to advance safety or other objectives.”
thinkingmachines.ai model card (opens in a new tab) · 2 Nov 2026
Training-data disclosure
50Average of two independent training-data checks: the Stanford index and an academic grading of EU AI Act training-data summaries.
- 50
EU AI Act training-data summary grades (AI Accountability Lab)
Independent sourceAI Accountability Lab (opens in a new tab) · 10 Nov 2026
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
0Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
No problems found in 1 public record. That is not proof.
Security programme and certifications
34Points for each confirmed yes.
- Yes
Is there a way to report security flaws, such as a bug bounty?
Company claim34/34“Email your report to security-reports@thinkingmachines.ai.”
- No
Does it state it holds a SOC 2 Type II report?
Company claim0/33 - No
Does it state it holds ISO 27001 certification?
Company claim0/33
Software vulnerabilities
70This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. Known-exploited flaws (CISA list) in the company's official software, last 24 months. A disclosed and fixed flaw does not lower the score.
No events
Independent sourceGitHub Advisory Database (opens in a new tab) · 12 Nov 2026
Data breaches
Not enough dataClear privacy policy
80Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“Device information: We collect information such as your device type, unique device identifier, and internet protocol (IP) address.”
- No
Does the privacy policy say whether your data is used to train AI?
Company claim0/20 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“We keep personal information for as long as reasonably necessary for the purposes explained in this Privacy Notice.”
- Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“We may disclose personal information to the following third parties for the reasons listed below: Vendors or service providers: We may discl…” MoreLess
“We may disclose personal information to the following third parties for the reasons listed below: Vendors or service providers: We may disclose your personal information to third parties who help us provide our Services, including for system administration, cloud storage, security, and web analytics.”
- Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“Depending on where you live, your legal rights over your data may include the right to: Access or know what personal information we have abo…” MoreLess
“Depending on where you live, your legal rights over your data may include the right to: Access or know what personal information we have about you and how it is processed; Delete your personal information that we hold about you; Update or correct inaccurate personal information that we hold about you Transfer a copy of your personal information to a third-party; Restrict, stop, or suspend our processing of your personal information; Object to our processing of your personal information; Withdraw your consent to our processing of your personal information, to the extent we rely on consent for such processing.”
Training-data defaults
0100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100 - No
Can you stop your data being used for training?
Company claim0/50
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“Depending on where you live, your legal rights over your data may include the right to: Access or know what personal information we have abo…” MoreLess
“Depending on where you live, your legal rights over your data may include the right to: Access or know what personal information we have about you and how it is processed; Delete your personal information that we hold about you; Update or correct inaccurate personal information that we hold about you Transfer a copy of your personal information to a third-party; Restrict, stop, or suspend our processing of your personal information; Object to our processing of your personal information; Withdraw your consent to our processing of your personal information, to the extent we rely on consent for such processing.”
- Yes
Can you delete your data?
Company claim50/50“Depending on where you live, your legal rights over your data may include the right to: Access or know what personal information we have abo…” MoreLess
“Depending on where you live, your legal rights over your data may include the right to: Access or know what personal information we have about you and how it is processed; Delete your personal information that we hold about you; Update or correct inaccurate personal information that we hold about you Transfer a copy of your personal information to a third-party; Restrict, stop, or suspend our processing of your personal information; Object to our processing of your personal information; Withdraw your consent to our processing of your personal information, to the extent we rely on consent for such processing.”
Privacy fines
Not enough dataIndependent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
Not enough dataCourt judgments
Not enough dataPrivacy contact and complaints
50Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“You can email us at privacy@thinkingmachines.ai to exercise these rights.”
- No
Does it tell you that you can complain to a regulator?
Company claim0/50
Score history
Newest first. Only days when the score changed are listed.
2 Nov 2026
Score 45
Method 2 Nov 2026
-