Four founders of one of China’s most promising artificial intelligence companies, Z.AI, worked on research in a joint project with a technology institute that the British government accused of having “very strong ties” to China’s main spy agency, according to publicly available research papers from China and an “espionage alert” from Britain.
The nearly four-year-long AI research project, which overlapped with the company’s start in 2019, was co-funded by Beijing-based China General Technology Research Institute, or CGTRI, and the National Natural Science Foundation of China, according to a previously unreported 78-page report that the project’s leaders compiled to detail their findings.
A CGTRI engineer and one of Z.AI’s founders were among the project’s leaders, and three other Z.AI founders contributed to the research, according to the report.
The report was published on a Chinese government website that provides research funding records.
Britain’s MI5 intelligence service, in the Sept 30 espionage alert, accused CGTRI of primarily existing to fund academic research that directly improves China’s main spy agency’s “technical capability for espionage”.
The first-of-its-kind bulletin said the institute has “very strong ties” to China’s Ministry of State Security and warned of potential criminal consequences for “any institution or individual continuing to conduct research ultimately funded by CGTRI following publication of this espionage alert”.
A spokesperson for China’s embassy in Britain called MI5’s allegations against CGTRI “baseless”.
The Z.AI founders’ work on research partially funded by an alleged Chinese intelligence front highlights the risks cited by some US officials regarding China’s growing prowess in AI – and could add to further scrutiny of Z.AI in particular. The two countries are racing to develop a technology that is transforming the global economy and could give their military services an advantage.
The US restricted Z.AI’s access to American technology in 2025 based on allegations that the company aided the military with AI research. More recently US officials accused the company of systemically extracting proprietary knowledge from American rivals.
It is not clear what, if anything, any of Z.AI’s founders may have known about CGTRI’s alleged relationship with Chinese intelligence. The MI5 alert did not mention Z.AI.
Z.AI did not respond to e-mailed requests for comment, nor did the four founders involved in the research project. The company previously said the US decision to restrict its access to technology “lacked factual basis” and would not have a substantial impact on its business.
Reached by phone, a CGTRI representative said the institute does not do any external communication with anyone. Efforts to e-mail CGTRI for comment were unsuccessful.
Liu Chang, a spokesperson for the Chinese Embassy in Washington, declined to address specific questions about Bloomberg’s report.
“I’m not familiar with the specifics,” he said. “The development of AI in China comes from greater self-reliance and strength in science and technology. China advocates AI for good. We firmly oppose attempts to throw mud at China by distorting facts.”
A White House spokesperson referred questions about Z.AI to the Commerce Department, which declined to comment.
In an indication of the importance of AI to US intelligence, President Donald Trump in October appointed Jay Clayton, the director of national intelligence, as his new AI czar. In-Q-Tel, an independent non-profit investment firm set up by the Central Intelligence Agency in 1999, has made AI-related investments as part of its focus on startups used by the military and intelligence agencies.
Chinese AI models have gained in popularity because they are cheaper than US rivals and are closing the performance gap.
In the last year, however, US AI labs OpenAI and Anthropic have raised concerns about Chinese rivals including Z.AI, DeepSeek, Moonshot and Minimax allegedly extracting data from American models to try to reproduce some of those capabilities through a technique called distillation.
It is a practice that is common across the industry but violates terms of service when used to create a competing technology. OpenAI and Anthropic have warned that models created through this method often lack safeguards designed to block misuse of cyber and biological capabilities.
The Chinese companies have not responded to the allegations, though China’s Ministry of Commerce denied intellectual property violations and threatened to take all necessary measures to respond to actions that harm its interests.
The project involving CGTRI and the Z.AI founders ran from January 2018 through December 2021 and had a total approved project budget of 2.94 million yuan, according to the researchers’ report.
It sought to develop AI tools to analyse social media posts, spot key events and map peoples’ connections, according to the researchers’ report.
A key goal of the project was developing a knowledge base of “China-related key persons”, according to the report, which did not elaborate on who such people would be.
James Mulvenon, who leads intelligence research and analysis at Virginia-based Pamir Consulting, a national security contractor, reviewed the researchers’ report at Bloomberg’s request. He said the project involved research with both military and civilian uses that seeks to revolutionise how people use AI to identify and track specific individuals.
China’s Ministry of State Security “had an obvious interest in funding this research and reaping the targeting benefits”, said Mulvenon, co-author of a book on Chinese industrial espionage.
Z.AI, also known as Zhipu, was spun out of research done at China’s elite Tsinghua University. The company has received backing from local governments in China, as well as tech giants including Alibaba Group and Tencent, Bloomberg has reported.
In January 2026, Z.AI became the first major Chinese generative-AI start-up to go public with its Hong Kong listing. Its shares have outperformed Hong Kong’s Hang Seng index, rising more than 300% since its IPO versus a 6% decline in the benchmark. Z.AI’s current market capitalisation is about US$32 billion.
In an interim financial report filed in September, Z.AI listed five founders as “key persons” who are part of the company’s “single largest group of shareholders”. Four of them are listed as participating in the AI research project, which was jointly conducted by CGTRI, Tsinghua University and Southeast University, according to the researchers’ report. Neither university responded to requests for comment.
Z.AI co-founder Li Juanzi, a professor in the computer science and technology department at Tsinghua University in Beijing, led the research project alongside CGTRI’s Cao Weibing and another professor from China’s Southeast University, the researchers’ report says.
It describes the three as being “jointly responsible for the design of the overall technical plan, coordination of tasks among the three participating institutions, and the overall research progress of the project”.
That report lists three other founders of Z.AI – Tang Jie, Xu Bin and Zhang Peng, who is the company’s chief executive officer – as co-authors of papers, co-inventors on patents, or holders of software copyrights in a directory of all the project’s research achievements. The report explicitly states that nonparticipants cannot be included.
Only one person identified in Z.AI’s interim report as a company founder and “key person” wasn’t named in the project’s documentation, Chairman Liu Debing.
Z.AI’s recent handling of a ledger it posted online detailing vulnerabilities it had found in other companies’ software also raised alarms, according to a report by the China-focused consulting firm Garnaut Global. The company is run by John Garnaut and Matt Pottinger, former national security officials from Australia and the US.
Garnaut Global said its analysis of Z.AI’s ledger, which was established on Aug 14, showed that Z.AI found 2,436 vulnerabilities in software from Microsoft, Intel, Alphabet’s Google and other leading Western companies.
Microsoft declined to comment, while Intel and Alphabet did not respond to requests for comment.
In the last year or so, some of the more advanced AI models have proven adept at finding flaws in software, some of which hackers might be able to exploit.
In some instances, the companies or computer researchers who find vulnerabilities alert the affected parties so they can be fixed before a hacker exploits them – sometimes for a cash reward.
But Z.AI chose to leave most of the affected vendors in the dark, disclosing just 5% of the vulnerabilities to the companies, according to the Garnaut report, which was reviewed by Bloomberg.
Ten days later, Z.AI took the ledger down, replacing it with a notice that the Chinese government would be managing vulnerabilities discovered by the company’s AI models through several databases including one run by the Ministry of State Security, the Garnaut report said.
“Rather than sharing vulnerability details with the affected companies, Zhipu has given China’s peak cyberespionage agency access to these vulnerabilities,” according to the Garnaut report. BLOOMBERG