Xiaomi
- Rank
- Score
- 69/149
- 42 out of 100
Xiaomi is a technology company headquartered in Beijing, China, best known for its smartphones, consumer electronics, smart home devices and electric vehicles. Its dedicated MiMo team, part of the company's AI research effort, builds large language models, including the open-weight MiMo-V2 series released on Hugging Face.
Is MiMo safe?
MiMo scores 42 out of 100 and ranks 69 of 149. Its strongest category is Privacy, and its weakest category is Transparency.
How is MiMo scored?
MiMo is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
50Points for each confirmed yes.
- Yes
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim50/50“CyberGym, 94.0, 95.1, 40.0, -, -, -”
huggingface.co (opens in a new tab) · 20 Oct 2026 - No
Did an outside organisation test the model before release?
Company claim0/50huggingface.co (opens in a new tab) · 20 Oct 2026
Safety test results
Average used74.1This outside rating doesn't cover this company, so the average of the companies it covers is used.
Incident record
52This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. AI Incident Database and AIAAIC Repository, last 24 months.
2 events
AllegationAI Incident Database (opens in a new tab) · 12 Nov 2026These are reports, not proven findings.
Date Event Severity 12 Oct 2025 AIID #1232 · Reportedly Fatal Xiaomi SU7 Ultra Crash in Chengdu Purportedly Involves Automated Driving Failure and Door Lock Malfunction12 Oct 2025 · High (reported) High (reported) 1 Jul 2025 AIAAIC1944 · Xiaomi SU7 on Autopilot collides with cement pole, kills three1 Jul 2025 · High (reported) High (reported)
Protecting children
50Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50huggingface.co (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim50/50“However, we do not offer services directly to a child or use personal data of children for the purposes of marketing.”
mi.com privacy policy (opens in a new tab) · 20 Oct 2026
Model documentation
50Points for each confirmed yes.
- Yes
Does the model card describe what the model can do?
Company claim25/25“Key features include: - Native Omnimodal + Long Horizon: Text, image, video, and audio in one model; 1M tokens for long repositories, tool t…” MoreLess
“Key features include: - Native Omnimodal + Long Horizon: Text, image, video, and audio in one model; 1M tokens for long repositories, tool traces, and multi-session agent runs.”
huggingface.co (opens in a new tab) · 20 Oct 2026 - Yes
Does the model card report test results?
Company claim25/25“Benchmark: DeepSWE v1.1, MiMo-V2.6 Pro: 71.9, MiMo-V2.6 Flash: 67.9, MiMo-V2.5 Pro: 19.0, Claude Opus 5: 74.0, GPT-5.6 Sol: 73.0, Claude Fab…” MoreLess
“Benchmark: DeepSWE v1.1, MiMo-V2.6 Pro: 71.9, MiMo-V2.6 Flash: 67.9, MiMo-V2.5 Pro: 19.0, Claude Opus 5: 74.0, GPT-5.6 Sol: 73.0, Claude Fable 5: 70.0”
huggingface.co (opens in a new tab) · 20 Oct 2026 - No
Does the model card state the model's limitations?
Company claim0/25huggingface.co (opens in a new tab) · 20 Oct 2026 - No
Does the model card describe safety safeguards?
Company claim0/25huggingface.co (opens in a new tab) · 20 Oct 2026
Training-data disclosure
Average used29.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
0Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
Security programme and certifications
34Points for each confirmed yes.
- Yes
Is there a way to report security flaws, such as a bug bounty?
Company claim34/34“Xiaomi (bug bounty)”
hackerone.com (opens in a new tab) · 2 Nov 2026 - No
Does it state it holds a SOC 2 Type II report?
Company claim0/33trust.mi.com security page (opens in a new tab) · 20 Oct 2026 - No
Does it state it holds ISO 27001 certification?
Company claim0/33trust.mi.com security page (opens in a new tab) · 20 Oct 2026
Software vulnerabilities
Not enough dataData breaches
Not enough dataClear privacy policy
100Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“When you sign up for or sign in to our Platform, you may provide us your Xiaomi Account information, including your Xiaomi Account ID, email…” MoreLess
“When you sign up for or sign in to our Platform, you may provide us your Xiaomi Account information, including your Xiaomi Account ID, email address, profile picture and nick name, so that you can: (1) be signed up for or signed in to our Platform; and (2) where you have an email address linked to your Xiaomi Account, receive important notices of changes to our Terms and Conditions, User Agreement, Privacy Policy or Cookie Policy.”
mi.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say whether your data is used to train AI?
Company claim20/20“For example, to enable us to more effectively manage and operate our business and provide our services, we may carry out data analysis, rese…” MoreLess
“For example, to enable us to more effectively manage and operate our business and provide our services, we may carry out data analysis, research, and development of statistical information related to the use of our services (e.g., machine learning or model algorithm training may be performed after de-identification processing activities).”
mi.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“As a general rule, we retain personal information for the period necessary for the purposes described in this Privacy Policy, or as required…” MoreLess
“As a general rule, we retain personal information for the period necessary for the purposes described in this Privacy Policy, or as required by applicable law.”
mi.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“To help us provide you with services described in this Privacy Policy, we share, where necessary, your personal information with our third-p…” MoreLess
“To help us provide you with services described in this Privacy Policy, we share, where necessary, your personal information with our third-party service providers.”
mi.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“A copy of your personal information processed by us will be provided to you upon your request free of charge.”
mi.com privacy policy (opens in a new tab) · 20 Oct 2026
Training-data defaults
0100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- Not found
Is your data used for training only if you opt in?
Company claim0/100mi.com privacy policy (opens in a new tab) · 20 Oct 2026 - Not found
Can you stop your data being used for training?
Company claim0/50mi.com privacy policy (opens in a new tab) · 20 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“A copy of your personal information processed by us will be provided to you upon your request free of charge.”
mi.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“Based on the requirements of applicable law, you have the right to request the deletion or removal of your personal information where there…” MoreLess
“Based on the requirements of applicable law, you have the right to request the deletion or removal of your personal information where there is no compelling reason for us to keep using it.”
mi.com privacy policy (opens in a new tab) · 20 Oct 2026
Privacy fines
Not enough dataIndependent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
Not enough dataCourt judgments
Not enough dataPrivacy contact and complaints
100Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“When we receive questions about personal information or requests to download or access items, we have a professional team that addresses suc…” MoreLess
“When we receive questions about personal information or requests to download or access items, we have a professional team that addresses such concerns, including Data Protection Officers (DPOs), who can be contacted through https://privacy.mi.com/support, or in the below postal addresses.”
mi.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does it tell you that you can complain to a regulator?
Company claim50/50“If you are not satisfied with the response you received, you can hand over the concern to the relevant regulatory authority in your jurisdic…” MoreLess
“If you are not satisfied with the response you received, you can hand over the concern to the relevant regulatory authority in your jurisdiction.”
mi.com privacy policy (opens in a new tab) · 20 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
5 Nov 2026
Score 42
Method 3 Nov 2026
-1
1 Nov 2026
Score 43
Method 28 Oct 2026, update 2
+1
28 Oct 2026
Score 42
Method 28 Oct 2026, update 2
-2
23 Oct 2026
Score 44
Method 21 Oct 2026
+3 · Data fix
21 Oct 2026
Score 41
Method 21 Oct 2026
-3 · Method update
20 Oct 2026
Score 44
Method Not recorded
+3 · Reason not recorded
14 Oct 2026
Score 41
Method Not recorded
-