Overall risk · high
governancecritical
Nexusflow was acquired by NVIDIA (approx. mid-2025) and no longer operates as an independent entity; its founder is now confirmed working at NVIDIA, and the company's website has been unreachable (SSL hostname mismatch) across three separate research checks in 2026. There is no active team maintaining, patching, or providing compliance support for Nexusflow-branded models.
jurisdictionhigh
US-incorporated entity, now effectively folded into NVIDIA (also US), confirming full CLOUD Act exposure with no EU legal presence identified anywhere in company records.
compliancehigh
No EU AI Act compliance statement, GPAI Code of Practice participation, or training-data transparency summary could be located for Nexusflow; targeted searches surfaced no Nexusflow-specific material, only generic third-party guidance.
privacymedium
Nexusflow's last-known privacy policy addressed only US state privacy laws (California CCPA, Nevada) with no GDPR-specific provisions, DPO contact, or EU data subject rights language; the page is now unreachable.
governancemedium
Model weights are distributed under mixed custom licences (Nexusflow Research License, Nexusflow community license) that restrict commercial/hosted redistribution more than a standard permissive open-source licence, and the issuing entity is now defunct, creating legal uncertainty for enterprise deployment.
Stav’s assessment
Editorial assessment, not legal advice. Stav's risk ratings, scores, and verdicts are our own analysis of publicly available information and may be incomplete or out of date. Verify independently before making compliance or procurement decisions.