Foundation Model

Foundation models such as GPT-class, Claude-class, Gemini-class, and Llama-class systems power most modern enterprise AI deployments. Regulators treat them as a distinct category because their downstream uses are unbounded and their risks transfer across applications.

Defining traits of foundation models include:

• Scale: Trained on web-scale data with billions of parameters.
• Generality: Adaptable to many tasks without task-specific training.
• Emergent capabilities: New behaviors that appear only at sufficient scale.
• Adaptation surfaces: Fine-tuning, prompting, and retrieval as customization paths.
• Regulatory category: Specific obligations under the EU AI Act for general-purpose AI.

Because foundation models are the substrate for so much downstream AI, governance focused on foundation-level controls (provenance, evaluation, change management) has outsized leverage. Strong foundation model governance often reduces the burden of downstream control implementation across many applications.

Governance teams also benefit from treating foundation models as platform components, with formal change management whenever underlying models are updated by the provider.

How PointGuard AI Helps

PointGuard AI Discovery inventories every foundation model in enterprise use, and AI Supply Chain Security evaluates model provenance, license, and known vulnerabilities before integration. The combination ensures foundation model adoption is matched by the visibility and risk-management discipline regulators now expect.

Learn More

• Wikipedia: Foundation model
• EU AI Act official text
• NIST AI Risk Management Framework