Join our Newsletter — 33% off our NHI Course
Home› Guides› Open-Weight Model Licence Tracker: Licence Terms, Thresholds and…
Standards Tracker AI Platforms

Open-Weight Model Licence Tracker: Licence Terms, Thresholds and Conditions by Model

PDF for newsletter subscribers · free to read online

← All guides
By NHI Mgmt Group, edited by Lalit Choda Updated 15 November 2026 13 min read
On this page

"Open weights" says nothing about what you may do with a model: the licence decides whether commercial use is allowed, whether you must show a "Built with" notice, and whether a large service needs a separate agreement first. This tracker lists the licence for 25 open-weight language model checkpoints from 18 providers, taken from each model card, and summarises the conditions written in the licence files for every provider-specific licence we could read. It is for platform teams, legal and procurement reviewers and developers choosing a model to self-host, fine-tune or offer to customers. It is a reference, not legal advice: read the licence file in the repository you download. Providers are listed alphabetically; order is never a ranking. Last checked: 2026-11-15.

This is an independent reference page from NHI Mgmt Group based on public provider documentation; it is not sponsored or endorsed by any provider.

Key takeaways

  • Most checkpoints use a standard licence. 13 of the 25 checkpoints listed use Apache 2.0 or MIT as stated on the card, including gpt-oss-120b, Gemma 4, Granite 4.2, Hy3, DeepSeek-V4.1-Flash-1017 and GLM-5.3-Flash.
  • Provider licences cluster around "Model as a Service". The Kimi K3.1-Pro, Mistral Ecosystem Open-Weight, Qwen3.8-Max and GLM-5.3 licences all define a Model as a Service business and attach a separate agreement, licence or review to it; the Muse Model License uses a similar test for offering model access as a service.
  • Thresholds differ by several orders of magnitude. Stated revenue triggers run from none (Mistral Ecosystem Open-Weight License) through US$20 million (Kimi, Muse, MiniMax) and US$50 million (Qwen3.8-Max) to US$10 billion (GLM-5.3).
  • The same family can carry two licences. Qwen3.8-27B is Apache 2.0 while Qwen3.8-2.4T-A95B uses the Qwen3.8-Max License; GLM-5.3-Flash is MIT while GLM-5.3 uses the GLM-5.3 License; Nemotron 3 Ultra and Super also use different licences.
  • One checkpoint listed is non-commercial. EXAONE 4.5 33B uses the EXAONE AI Model License Agreement 1.2 - NC, which prohibits commercial use and limits use to research and education; K-EXAONE 2.0 from the same provider is Apache 2.0.

Status key

Licence groupMeaning on this page
Standard permissiveApache 2.0 or MIT, as stated on the model card or licence tag.
Permissive model licenceA published, non-provider-specific model licence (OpenMDW-1.1) or a provider licence that states the work is commercially usable without a size threshold (NVIDIA Nemotron Open Model License).
Provider licence with conditionsA licence written for the model family that adds conditions such as attribution, Model as a Service rules or revenue thresholds.
Non-commercialThe licence prohibits commercial use without a separate licence.
Terms not summarisedThe card names a provider licence but does not summarise it, and the licence file was not read for this page.

"Gated" means the Hugging Face page asks for an access request before download. Parameters are the card's own figures; Hugging Face metadata sometimes shows a slightly different number.

Open-weight licences by model

As of 2026-11-15. Providers alphabetical; within a provider, largest checkpoint first.

ProviderCheckpointParameters (total / active)Licence as namedGroupGatedSource
AI21 LabsAI21-Jamba2-Mini52B / 12BApache 2.0Standard permissiveNo gating notice shownCard
Alibaba (Qwen)Qwen3.8-2.4T-A95B2.4T / 95BQwen3.8-Max LicenseProvider licence with conditionsNo gating notice shownCard
Alibaba (Qwen)Qwen3.8-27B27B (dense)Apache 2.0Standard permissiveNo gating notice shownCard
BaiduERNIE-5.5-Flash-Base (pre-trained base checkpoint)280B / 14BERNIE 5.5 Flash Base Model License Agreement v1.0Terms not summarisedNo gating notice shownCard
DeepSeekDeepSeek-V4.1-Flash-1017763BMIT (repository and model weights)Standard permissiveNo gating notice shownCard
GoogleGemma 4 (E2B, E4B, 12B, 26B A4B, 31B)Up to 30.7B dense; 25.2B / 3.8B MoEApache 2.0Standard permissiveNot stated on the cardCard
IBMgranite-4.2-30b30B (dense)Apache 2.0Standard permissiveNo gating notice shownCard
LG AI ResearchK-EXAONE-2.0-750B-A37B750B / 37BApache 2.0Standard permissiveNo gating notice shownCard
LG AI ResearchEXAONE-4.5-33B33BEXAONE AI Model License Agreement 1.2 - NCNon-commercialNo gating notice shownCard
MetaMuse-Spark-Open-816B-A42B816B / 42BMuse Model License (15 October 2026)Provider licence with conditionsYes: access formCard
MetaMuse-Glimmer-30BAbout 29.6B (dense)Apache 2.0Standard permissiveNo gating notice shownCard
MiniMaxMiniMax-M3About 428B / 23BMiniMax Community LicenseProvider licence with conditionsNo gating notice shownCard
Mistral AIMistral-Large-4-1T-A52BAbout 1T / 49B (52B with embeddings)Mistral Ecosystem Open-Weight LicenseProvider licence with conditionsNo gating notice shownCard
Mistral AIMistral Small 4 (26.03)119B / 6.5BApache 2.0Standard permissiveNot stated on the cardCard
Moonshot AIKimi-K3.1-Pro2.8T / 104BKimi K3.1 Pro LicenseProvider licence with conditionsNo gating notice shownCard
NVIDIANemotron 3 Ultra 550B-A55B550B / 55BOpenMDW-1.1Permissive model licenceNo gating notice shown; some training data gatedCard
NVIDIANemotron 3 Super 120B-A12B120B / 12BNVIDIA Nemotron Open Model LicensePermissive model licenceNo gating notice shownCard
OpenAIgpt-oss-120b117B / 5.1BApache 2.0Standard permissiveNot stated on the pageModel page
Sarvamsarvam-105bNot stated on the card (Hugging Face metadata: 106B) / 10.3BApache 2.0Standard permissiveNo gating notice shownCard
StepFunStep-5-Preview600B / 27BStepFun Model License 1.0Terms not summarisedNo gating notice shownCard
StepFunStep-3.7-Flash198B / about 11BApache 2.0Standard permissiveNo gating notice shownCard
TencentHy3295B / 21BApache 2.0Standard permissiveNo gating notice shownCard
UpstageSolar-Open2-250B250B / 15BUpstage Solar LicenseTerms not summarisedNo gating notice shownCard
Z.aiGLM-5.3753B (active not stated)GLM-5.3 LicenseProvider licence with conditionsNo gating notice shownCard
Z.aiGLM-5.3-Flash320B / 18BMITStandard permissiveNo gating notice shownCard

Mistral AI's models page also tags smaller open-weight models: Ministral 3 (14B, 8B, 3B), Voxtral Small and Shieldstral 1.0 as Apache 2.0, and the Timestral 1.0 time-series models as Modified MIT (source). For sizes, hardware and hosting of the largest checkpoints, see Open-Weight Frontier Models Compared.

Thresholds and triggers in provider licences

As of 2026-11-15, from the licence file in each repository. Wording is summarised; amounts and triggers are as written in the licence.

LicenceTriggerThreshold as writtenWhat is requiredStated exemptions
GLM-5.3 License (Z.ai)Operating a Model as a Service businessAggregate revenue of licensee and affiliates above US$10 billion in any consecutive 12 monthsPass Z.AI's security review before commercial useEnd-user products with model capabilities embedded in specific features or harnesses; relaying requests to models hosted by others (excluded from the MaaS definition)
Kimi K3.1-Pro License (Moonshot AI)Model as a Service business; large commercial productsMaaS revenue above US$20 million in any consecutive 12 months; products with more than 100 million monthly active users or more than US$20 million monthly revenueSeparate agreement with Moonshot AI before commercial use; "Kimi K3.1-Pro" displayed prominently in the user interfaceInternal use not made available to third parties; use through Moonshot AI's official products or certified inference partners
MiniMax Community LicenseCommercial useMore than US$20 million yearly revenuePrior written authorisation above the threshold; a one-time notice at or below it; "Built with MiniMax M3" displayedNone stated beyond the threshold
Mistral Ecosystem Open-Weight LicenseOperating a Model as a Service businessNo revenue or user thresholdSeparate commercial licence from Mistral AI before commercial useInternal use; use through Mistral AI's official products
Muse Model License (Meta)Offering model access to third parties as a serviceAggregate gross revenue above US$20 million in any consecutive 12 monthsNotify Meta and sign a separate written agreement; "Built with Muse Spark Open" displayed in every caseInternal use, research, non-service commercial use, features of the licensee's own product
Qwen3.8-Max License (Alibaba Qwen)Model as a Service or AI Work Assistant business; large commercial productsAbove US$50 million aggregate revenue in any consecutive 12 months; products with more than 100 million monthly active users or US$20 million monthly revenueSeparate licence from Qwen before commercial use; model name displayed prominently in the user interfaceInternal use not made available to third parties

What each provider licence adds

EXAONE AI Model License Agreement 1.2 - NC (LG AI Research)

Clause 3.1 states the licensee "is expressly prohibited from using the Model, Derivatives, or Output for any commercial purposes"; use is limited to research and education (2.1a). Modified models must start their name with "EXAONE" (2.1c), the model may not be used to build competing models (3.1), and the agreement is governed by Korean law with arbitration in Seoul. Commercial use needs a separate licence from LG Management Development Institute.

GLM-5.3 License (Z.ai)

Grants free use, copying, modification, distribution and sale of the weights, code and documentation, with copyright and permission notices kept in copies. The only threshold is the US$10 billion Model as a Service security review above; questions go to the address in the licence.

Kimi K3.1-Pro License (Moonshot AI)

Uses MIT-style grant wording, including running, deploying and fine-tuning, with notices kept in copies. Section 2 covers Model as a Service, Section 3 the display requirement and Section 4 the exemptions shown in the table.

MiniMax Community License

Frames the grant around non-commercial purposes and makes commercial use (paid products, commercial hosted APIs, commercial deployment of fine-tuned versions) conditional on the notice or authorisation step. It lists prohibited uses including unlawful content, military purposes, harm to minors, harmful misinformation and discrimination.

Mistral Ecosystem Open-Weight License

Described on the card as "a modified version of the MIT license, for both commercial and non-commercial use". It defines Model as a Service as giving a third party access for inference or post-training with "meaningful control over the inputs, parameters, or training data", and sets no size threshold.

Muse Model License (Meta)

Dated 15 October 2026. Requires "Built with Muse Spark Open" in the product interface, documentation, website or settings, ships with a Usage Policy (Exhibit A), states the model is not intended for people under 18, and claims no ownership of outputs. Download is gated: the access form asks for full legal name, date of birth and organisation.

NVIDIA Nemotron Open Model License

States that works "are commercially usable" under a perpetual, royalty-free licence, claims no ownership of outputs, requires the NVIDIA notice text where the work includes a NOTICE file, ends the licence for anyone who sues alleging the work infringes, and includes export and sanctions compliance; last modified 15 December 2025. Nemotron 3 Ultra instead uses OpenMDW-1.1, which requires keeping the agreement and origin notices when distributing, ends rights for anyone who sues claiming patent or copyright infringement by the materials, and places no restrictions on outputs.

Qwen3.8-Max License (Alibaba Qwen)

Permits use, modification, distribution, hosting and fine-tuning of weights, configuration, inference code and documentation. "AI Work Assistant" means an independent product mainly for AI-assisted coding or office productivity; single-purpose tools and assistants for other domains are excluded.

Licences named but not summarised on the card

The ERNIE 5.5 Flash Base Model License Agreement v1.0 (Baidu) is named without a summary. StepFun describes its Model License 1.0 as "an Apache-2.0-Style license, with additional attribution and commercial-license conditions". The Upstage Solar card summarises derivative-model rules: prefix the name with "Solar", display "Built with Solar" and include the licence. Read each licence file before use.

What to watch next

  • Licence changes between versions: families already mix licences (Qwen3.8, GLM-5.3, Nemotron 3, EXAONE), so a new checkpoint can move to a different licence.
  • Model as a Service clauses: four provider licences now define MaaS; watch the definitions and thresholds if you host models for customers.
  • Base and preview checkpoints: ERNIE-5.5-Flash-Base and Step-5-Preview carry their own licences; a later post-trained or final release may differ.
  • Usage policies: Gemma 4 links terms of use and a prohibited use policy, and Muse models ship usage policies; these sit beside the licence and can change separately.

How to use this tracker

  1. Find the checkpoint, not the family. Match the exact repository name; licences differ within families.
  2. Read the licence file at the commit you download. Store a copy with the weights and record the commit hash in your model register.
  3. Check your use against the trigger. Internal use, embedding in your own product and offering a model API to third parties are treated differently by most provider licences.
  4. Plan attribution early. "Built with" notices and model-name display rules affect product interfaces and documentation.
  5. Route through approval. Use the Open Source Licence Compliance Guide and the AI Model Change Approval Template; for the model's documentation see the Model Card and System Card Index by Provider.

Practitioner checklist

  • Record licence name, version and repository commit for every open-weight checkpoint you run or fine-tune.
  • Classify each deployment as internal use, embedded product feature or Model as a Service before reading the thresholds.
  • Check revenue and monthly active user figures for your organisation and affiliates against any stated threshold.
  • Add required "Built with" or model-name notices to product interfaces and documentation before launch.
  • Confirm that non-commercial licences (such as EXAONE 4.5 NC) are limited to research and evaluation environments.
  • Scan downloaded weights and pin hashes; see the Open-Weight Model Security Guide and Self-Hosted LLM Security Guide.
  • Get legal review for any provider licence; this tracker summarises licence text and is updated from time to time, not on a fixed schedule.

Standards and references

Related NHI Mgmt Group resources: Open-Weight Frontier Models Compared · Open-Weight vs Closed Models Explained · Open Source Licence Compliance Guide · Self-Hosted LLMs vs Hosted LLM APIs · Model Card and System Card Index by Provider. This tracker summarises published licence texts and is not legal advice.

PDF for subscribers

Take this guide with you

Every section, table and checklist in one PDF, with links to the sources and related guides. Subscribe to our weekly NHI & AI Identity Journal and we’ll email you a download link.

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.

NHIMG Editorial Note
Researched and written by the NHI Mgmt Group editorial team using AI tools, under the editorial direction of Lalit Choda. Facts are drawn from the sources listed on this page and checked by our automated quality process. Last updated 15 November 2026. Spotted an error? Use our contact page.
NHI Mgmt Group, the independent authority on Non-Human Identity, IAM and Agentic AI security. nhimg.org

PDF Downloads for Newsletter Subscribers

Get the guide

Enter your details and we’ll email you a download link.

The full guide is free to read online. The PDF is a thank you for subscribing.

Fill in all fields marked * and tick the PDF box to continue.