Voidly
All findingsPublished research

AI is blocked two ways: companies geo-fence the chatbots, states censor the model hub

'AI is blocked in Iran, Russia, China' is one headline hiding two different stories with two different villains. Tag WHY each AI service is unreachable and a clean division of labor appears: the AI COMPANIES geo-fence their consumer CHATBOTS out of sanctioned countries, while the STATES…

Read the full published summary

'AI is blocked in Iran, Russia, China' is one headline hiding two different stories with two different villains. Tag WHY each AI service is unreachable and a clean division of labor appears: the AI COMPANIES geo-fence their consumer CHATBOTS out of sanctioned countries, while the STATES network-censor the developer SUPPLY CHAIN (the open model+dataset hub). The blocked pairs split almost evenly — ~20 vendor geo-restrictions and ~20 state network blocks — but on different layers. Vendor geo-restriction: ChatGPT/Claude/Gemini/Perplexity unreachable in Iran, Russia, Cuba, Belarus, Syria, Venezuela because OpenAI/Anthropic/Google/Perplexity decline those markets (US sanctions/export-control); the network path is open, the vendor turns the user away, the firewall isn't involved. State network censorship: DOMINATED by HuggingFace, network-blocked in 16 countries (AE/AZ/BY/CN/CU/EG/IQ/IR/KZ/MM/PK/RU/SA/SY/VE/VN) — their filtering drops the connection to the model/dataset hub — plus China network-blocking a few chatbots (ChatGPT, Gemini, Mistral, Perplexity). So an Iranian dev can't open ChatGPT (OpenAI won't serve Iran) AND can't reach HuggingFace (Iran blocks it) — same person, two tools, two entirely different gatekeepers. The single most-blocked AI service is HuggingFace (16 countries, more than ChatGPT's 7 or Claude's 8): censorship of AI is increasingly censorship of the supply chain, not just the chat apps. China is the full-stack censor (6 services: firewall on ChatGPT/Gemini/Mistral/Perplexity/HuggingFace, Claude vendor-geo). Heavy general censors Ethiopia/Sudan/Uzbekistan leave AI alone. The matrix tags the mechanism per cell; the summary ships a blocked_by breakdown (vendor_geo_restriction vs state_network_block). Live: /v1/atlas/ai-availability. (Correction: an earlier version put state-censorship at 4 and framed it 'mostly vendor-geo' — a miscount over a stale snapshot that omitted the 16 HuggingFace blocks; the live split is ~20/20.)

Under review. This finding cites block counts or rates that included CensoredPlanet rows and IODA outages, which Voidly no longer accepts as block evidence. The figures below are kept as published; do not cite them as current block verdicts. Why these figures are held ↗

“AI is blocked in Iran, Russia, China” is a single headline hiding two different stories with two different villains. When you tag why each AI service is unreachable, a clean division of labor appears: the AI companies geo-fence their consumer chatbots out of sanctioned countries, while the states network-censor the developer supply chain — the open hub for model weights and datasets. They are blocking different layers of the stack, for different reasons.

Two mechanisms, roughly equal in number

Across the tracked AI services and countries, the blocked pairs split almost evenly — about 20 vendor geo-restrictions and 20 state network blocks — but they fall on different parts of the stack:

  • Vendor geo-restriction (the companies): ChatGPT, Claude, Gemini, and Perplexity are unreachable in Iran, Russia, Cuba, Belarus, Syria, and Venezuela because OpenAI, Anthropic, Google, and Perplexity decline to serve those markets — US sanctions / export-control compliance. The network path is open (the edge often responds); the vendor turns the user away. The local firewall isn't involved.
  • State network censorship (the governments): dominated by HuggingFace, which is network-blocked in 16 countries (AE, AZ, BY, CN, CU, EG, IQ, IR, KZ, MM, PK, RU, SA, SY, VE, VN) — their filtering drops the connection to the model/dataset hub. The rest are China network- blocking a handful of chatbots (ChatGPT, Gemini, Mistral, Perplexity).

The division of labor

Put plainly: an Iranian developer can't open ChatGPT because OpenAI won't serve Iran, and can't reach HuggingFace because Iran's government blocks it. Same person, two unreachable tools, two entirely different gatekeepers — a San-Francisco compliance team and a state censor. The single most-blocked AI service overall is HuggingFace (16 countries, more than ChatGPT's 7 or Claude's 8): censorship of AI is increasingly censorship of the supply chain, not just the chat apps.

China is the full-stack censor; some heavy censors ignore AI

China is the standout — it network-blocks the most AI services (six): ChatGPT, Gemini, Mistral, Perplexity, and HuggingFace are firewall-dropped, while Claude is the lone vendor-geo case (Anthropic declines China; the edge is reachable). It censors both the apps and the hub. At the other end, several countries that censor heavily in general — Ethiopia, Sudan, Uzbekistan — show every tracked AI service reachable, alongside the democracies. Censorship is service-specific; a country's overall posture doesn't predict its treatment of any one tool.

Why it matters

“AI is censored in N countries” conflates a sanctions decision made by a company with a censorship decision made by a state — and it conflates blocking a chatbot with blocking the model hub developers build on. Both restrict access; they are different actors, different layers, and different remedies. Voidly's matrix tags the mechanism on every cell, and the summary now ships a blocked_by breakdown (vendor_geo_restriction vs state_network_block) so you can separate them in one call. Live: GET /v1/atlas/ai-availability.

Correction (2026-06-24): an earlier version of this finding put the state-censorship count at 4 and framed the split as “mostly vendor-geo.” That was a miscount over a stale, filtered snapshot — it omitted the 16 HuggingFace network blocks. The live breakdown is ~20/20; corrected here.

The source record.

Original source links and labels. Linked responses may have changed since publication.