Zum Inhalt springen
KIInfrastrukturDatenschutz

LLM Providers Compared 2026: US, China, Europe

Jamin Mahmood-Wiebe

Jamin Mahmood-Wiebe

Three clusters of glass server bars on a dark surface, separated by colour according to region of origin
Article

All Providers at a Glance

This table sorts by region of origin, because that is where the most important decision sits: not raw capability, but where your data flows and who can access it. The detailed profiles with benchmarks, pricing, licenses and data protection follow below, grouped by US, China and Europe. After that comes the decision logic: which model for which task.

ℹ️

Data as of

Every model name, benchmark score and price in this article was checked on 22 July 2026 against official sources, Hugging Face model cards and independent leaderboards (LMArena, Artificial Analysis, SWE-bench). This field moves fast: several models named here (Kimi K3, Gemini 3.6 Flash, Qwen 3.8) launched in the same July week. Treat individual figures as a snapshot, not a point-in-time final tally, and check the linked leaderboards for current numbers.

Comparing LLM Providers: Why "the Best Model" Is the Wrong Question

In short: Almost every comparison of AI models crowns a winner based on one benchmark. The problem: no provider wins across all dimensions. The strongest coding model is a closed US API with no direct EU hosting. The cheapest model per token is a Chinese open-weight model you can self-host in the EU. The most sovereign setup requires your own GPU infrastructure. These axes point in different directions.

Four Questions Instead of a Ranking

Before you pick a provider, settle four things: Which task (coding, high-volume processing, research, sensitive data)? How sensitive is the data (public, internal, personal)? What is the volume (a few requests a day, or hundreds of thousands)? And how much operations do you want to run yourself (a finished API, or your own hosting)? The answers almost always lead to different models for different tasks, not to a single winner.

For a deeper look at how to run a model in a GDPR-compliant way in the first place, see GDPR-Compliant AI: On-Premise LLM. If you are after the practical hosting side, Local LLM Systems with Open Source is the right next step. This article stays one level above: which provider, which model do you choose?

The Three Degrees of Openness: Open Weights, Open Source, Closed

The most important technical term in this comparison is constantly confused. There are three tiers, not two.

Closed (API only): The model is reachable only through the provider's API. No weights, no training code, no self-hosting. You rent access. Examples: Claude, GPT-5.x, Gemini Pro, Grok 4.x.

Open weights: The trained weights are downloadable and run locally. Training data and the full training pipeline stay behind, and the license may restrict certain uses. You can self-host and fine-tune. Examples: Llama 4, DeepSeek, Qwen, Mistral.

Open source (per OSI): The strictest tier, per the Open Source Initiative definition, additionally requires disclosed training data and pipeline. In practice no major model fully meets it, because even MIT- or Apache-licensed models hold back their training data.

⚠️

Open Weights Is Not Open Source

This is the single most common mistake in the whole field. "Open weights" means you get the weights. The license can still be strict. Meta's Llama 4 is open weight, but the community license explicitly bans EU companies from using the multimodal models. DeepSeek and Zhipu, by contrast, ship under MIT, Qwen and Mistral under Apache 2.0: genuine, unrestricted commercial use. The difference is not a formality; it decides whether you may legally deploy the model.

US Providers: The Capability Leaders

Five US labs dominate raw capability. Four ship their flagship as closed API only, one (Meta) commits fully to open weights but has a licensing problem for Europe.

Anthropic — Claude

Anthropic is the current reference point for agentic coding. The flagship Claude Fable 5 reaches around 95 percent on SWE-bench Verified (as of July 2026, per benchmark trackers), the most realistic public coding benchmark. Below it sit Claude Opus 4.8 as the reasoning workhorse, Claude Sonnet 5 as the balanced default and Claude Haiku 4.5 for fast, cheap tasks. All with a 1 million token context.

Every Claude model is closed. No open-weight release, no self-hosting. Pricing is the highest in the field: Fable 5 costs 10 USD per 1 million input tokens and 50 USD per 1 million output tokens; Opus 4.8 sits at 5 / 25 USD. The batch API discount halves both, and prompt caching cuts input costs to 10 percent on cache hits.

On data protection, Anthropic has the cleanest default: API data is auto-deleted after 7 days and not used for training (contractually guaranteed since early 2026). Certified to SOC 2 Type II, ISO 27001 and ISO 42001. The catch for Europe: Anthropic's own API offers no EU hosting. GDPR-compliant EU processing runs only via AWS Bedrock or Google Vertex AI in EU regions, at roughly a 10 percent premium.

Vorteile

  • Leads coding benchmarks (SWE-bench ~95%)
  • Cleanest API data policy (7-day deletion, no training)
  • Strong extended reasoning

Nachteile

  • Most expensive flagship in the field
  • No open weights
  • EU hosting only via hyperscalers

OpenAI — GPT

OpenAI has the widest reach. The flagship GPT-5.6 Sol (July 2026) targets complex reasoning and coding, with GPT-5.6 Terra (balanced) and GPT-5.6 Luna (volume) below it, all with 1 million token context. Notable: OpenAI published almost no traditional academic benchmarks at the GPT-5.6 launch (no SWE-bench Verified, no MMLU) and leaned on agentic tests like Terminal-Bench instead, where Sol reaches 88.8 percent. That makes direct comparison harder.

Important for this field: OpenAI released gpt-oss-120b and gpt-oss-20b, two genuine open-weight models under Apache 2.0. The 120B model runs on a single 80 GB GPU, the 20B model on 16 GB edge devices. The GPT-5.x flagships stay closed.

Pricing: GPT-5.6 Sol costs 5 / 30 USD per 1 million tokens; the cheap GPT-5.4 nano is just 0.20 / 1.25 USD. OpenAI has offered native EU data residency since 2026, plus access via Azure OpenAI in EU regions (Sweden Central, France Central). API and enterprise data is not used for training.

Vorteile

  • Largest ecosystem and reach
  • gpt-oss under Apache 2.0 — a real open-source contribution
  • Native EU data residency plus Azure EU

Nachteile

  • Traditional benchmarks withheld for GPT-5.6
  • Highest output price among flagships (30 USD)
  • Zero Data Retention only by enterprise agreement

Google — Gemini

Google delivers the best price-performance ratio in the upper field. The flagship Gemini 3.1 Pro leads on GPQA Diamond at around 94 percent and offers up to 2 million tokens of context, but has been in Preview status since February 2026. The Flash models (3.5 Flash, 3.6 Flash) are the real argument: at around 1.50 USD input per 1 million tokens they sit far below competing flagships, and Flash-Lite drops to 0.30 USD.

Google ships open weights through the separate Gemma 4 family (2B to 31B) under Apache 2.0. The Gemini flagships themselves are closed. On data protection, Google has the broadest certification (including ISO 42001 for AI governance) and native EU multi-region hosting via Vertex AI. Paid API data is not used for training.

Vorteile

  • Best price-performance ratio (Flash models)
  • Largest context (2M) and strong on GPQA
  • Broadest certification, native EU hosting via Vertex

Nachteile

  • Flagship in Preview status since February
  • Coding performance below Claude and OpenAI
  • Fragmented model naming (3.0/3.1/3.5/3.6 in parallel)

Meta — Llama

Meta is the big open-weight pioneer among US labs. Llama 4 Scout carries a 10 million token context, the largest in the field. It and Llama 4 Maverick are freely downloadable and available via providers like Together, Fireworks or AWS Bedrock from 0.08 USD per 1 million tokens, the cheapest frontier-adjacent models around.

But Llama 4 has a hard problem for Europe. The Llama 4 Community License explicitly forbids companies headquartered in the EU from using the multimodal models. Since the entire Llama 4 family is multimodal, it is legally unusable for EU companies like IJONIS, with no exception for research and no workaround through the cloud. Meta cites "regulatory uncertainty" around the EU AI Act. On top of that, the license is not open source per OSI and FSF: it carries a 700-million-user threshold and naming rules for derivatives.

Blocked for EU Companies

Llama 4 is the textbook case of why "open weights" alone says nothing about usability. The weights are freely downloadable, but the license bans EU-based companies from using the multimodal models. For a company based in Germany, Austria or Switzerland trading into the EU, that means: legally off-limits. Check the license, not just the "open" label.

xAI — Grok

xAI offers the best price-performance ratio among the closed flagships. Grok 4.5 (July 2026) has 500K context and configurable reasoning effort; Grok 4.3 sits at 1.25 / 2.50 USD per 1 million tokens, clearly cheaper than Claude or GPT. On the Artificial Analysis Intelligence Index, Grok 4.5 lands behind Claude, GPT and Gemini. Older models (Grok-1, Grok-2) are open weight; the current flagships are closed.

The catch is data protection: xAI has the weakest GDPR position in the field. No EU data residency, no standard DPA, and multiple European supervisory authorities are investigating the use of X user data to train Grok. For regulated European data, Grok is hard to justify.

Vorteile

  • Best price-performance among closed flagships
  • Available via Bedrock, Vertex, Azure, Oracle
  • Generous context for the price

Nachteile

  • Weakest GDPR position, active EU investigations
  • Poor benchmark transparency (no GPQA/MMLU for 4.5)
  • Reputational risk from the X association

China: The Open-Weight Disruption

The most exciting movement in the field comes from China. Most Chinese models are open weight, several under genuine MIT or Apache 2.0, and they reach frontier level on coding benchmarks at a fraction of the cost. That changes the math for any task where you can or want to self-host.

80%+SWE-bench Verified for the best open-weight models
$0.30input per 1M tokens on DeepSeek V4 — 10-20x cheaper than US frontier
MITlicense of DeepSeek and GLM — fully permissive
⚠️

The Decisive Data-Protection Distinction

With Chinese models there are two entirely different data-protection questions that get constantly mixed up. First, the API: sending data to the official endpoints of DeepSeek, Moonshot, Zhipu or MiniMax sends it to servers in China. There is no adequacy decision for the EU, and China's data laws (PIPL, DSL, the National Intelligence Law) apply. For personal EU data, that is effectively a non-starter. Second, the weights: an open-weight model run on your own EU infrastructure sends nothing to China, because it is pure math running locally. That is exactly what makes Chinese open-weight models legitimately usable for sensitive workloads. The data-protection risk lives in the service, not in the model. Censorship is a third, separate question: political filters on topics like Tiananmen or Taiwan are trained into the weights and persist even when self-hosted.

DeepSeek — MIT-Licensed Frontier Coding

DeepSeek is the best-known Chinese provider. DeepSeek V4 Pro (1.6 trillion parameters, MoE) reaches around 80 percent on SWE-bench Verified, the strongest open-weight coding result, at 0.30 USD input and 0.50 USD output per 1 million tokens on its own API. Every model ships under MIT, the most permissive license there is: commercial use, modification, redistribution without restriction.

That makes DeepSeek the poster child for the EU self-hosting argument: frontier-adjacent coding capability, downloadable from Hugging Face, runnable via vLLM or SGLang on your own EU infrastructure.

To be honest about it: security researchers found documented weaknesses on the official API (an exposed database, high jailbreak rates), and censorship is trained into the weights.

Moonshot AI — Kimi

Moonshot has fielded Kimi K3 (July 2026, 2.8 trillion parameters), the largest open-weight model announced so far. The predecessor Kimi K2.6 is currently the strongest open-weight coding model on SWE-bench Pro (58.6 percent), beating GPT-5.4 and Claude Opus 4.6 there. The license is "Modified MIT": effectively MIT, with an attribution requirement only above 100 million active users or 20 million USD monthly revenue, so unrestricted for nearly every company.

K2.6 costs 0.95 / 4.00 USD per 1 million tokens; K3 sits at frontier level with 15 USD output. Same data-protection logic as every Chinese provider: API to China, self-hosting the weights is clean.

Zhipu AI — GLM

Zhipu (Z.ai, listed in Hong Kong since January 2026) delivers with GLM-5.2 (around 753B, MoE) the highest SWE-bench Pro score of any open-weight model (62.1 percent, as of July 2026). License: MIT. Pricing: 1.40 / 4.40 USD on its own API, around 0.95 / 3.00 USD via OpenRouter, which Zhipu itself describes as "roughly one-sixth of GPT-5.5".

One notable detail: GLM-5 was trained entirely on Huawei Ascend chips, a full supply chain without US silicon. That is less a user argument than a signal of how independently Chinese labs can now produce.

Alibaba — Qwen

Alibaba's Qwen has the broadest model range, from 3B to 397B. The flagship Qwen 3.7 Max reaches around 80 percent on SWE-bench Verified and, at rank 5, is the highest-placed Chinese model on LMArena, but it is closed. The open-weight models (Qwen 3.5, Qwen 3.6-27B) ship under Apache 2.0 with an explicit patent grant, the cleanest license in the Chinese field.

The dense Qwen 3.6-27B is especially interesting for EU self-hosting: 77 percent SWE-bench on a single A100, practical without a multi-node cluster. The catch: the best Qwen (3.7 Max) is closed; only the smaller models are self-hostable.

MiniMax — Multimodal but Custom License

MiniMax out of Shanghai stands out with MiniMax M3 (June 2026), the first open-weight model combining frontier coding, 1 million context and native multimodality. On GPQA Diamond, M3 leads the open-weight models at 92.9 percent. Pricing is aggressive: 0.60 / 2.40 USD.

But watch the license: M3 uses the "MiniMax Community License", a custom license with commercial restrictions, so neither MIT nor Apache nor OSI-approved. Read the license text before any commercial deployment. The predecessor M2.7 was still under Modified MIT; the switch is a tightening.

ℹ️

And the Other Chinese Labs?

Beyond the big five: Tencent Hunyuan (Hy3, 295B, Apache 2.0) removed its initial EU restrictions in the July release. 01.AI (Yi) stopped pre-training and became a platform play. Baidu ERNIE and ByteDance Doubao are strong but mostly closed, so not an option for EU self-hosting.

Europe: Sovereignty as the Selling Point

European labs do not lead raw-capability benchmarks, and they do not try to. Their argument is a different one: data sovereignty, EU hosting without US CLOUD Act access, and in Aleph Alpha's case, proven deployments in classified environments. For many European companies, from the Mittelstand to large enterprises, that is the decisive factor.

Mistral — France

Mistral out of Paris is the strongest European provider and the only one to credibly combine frontier-adjacent capability with full sovereignty. The flagship Mistral Medium 3.5 reaches 77.6 percent on SWE-bench Verified, competitive in the upper open-weight field though below the US top models. Almost the entire model family (Large 3, Medium 3.5, Small 4, Devstral 2, Magistral Small) ships under Apache 2.0.

The real point is data protection: Mistral is EU-based, hosts natively in Paris and is not subject to the US CLOUD Act, unlike any US provider, even in EU regions. Pricing is aggressive: Medium 3.5 at 1.50 / 7.50 USD, the large Large 3 at just 0.50 / 1.50 USD. And because most models are Apache 2.0, they run on-premise or air-gapped with no data leaving at all.

Aleph Alpha — Germany

Aleph Alpha out of Heidelberg deliberately follows a different strategy. Instead of competing for the best chat model, the company builds sovereign AI infrastructure. The Pharia-1 models (7B) are not benchmark leaders and do not claim to be; they sit in the 7-8B class. The product is not the model but the PhariaAI platform: air-gapped, on-premise, auditable, GDPR- and EU-AI-Act-compliant by design.

That is exactly what has won Aleph Alpha production customers no US or Chinese model reaches: the German armed forces (Bundeswehr), federal and state administration, BMW, Siemens. The public weights ship under the "Open Aleph License" (non-commercial only); commercial use runs through sales. In April 2026, a merger with the Canadian provider Cohere was announced (combined value around 20 billion USD), meant to bring Cohere's retrieval strength into the sovereign deployment envelope.

ℹ️

European Non-LLM Stars and the Infrastructure

Not every European AI success is an LLM. Black Forest Labs (Freiburg) builds the strongest open-weight image models with FLUX, not text. DeepL (Cologne) delivers specialized translation that often beats general LLMs on European language pairs. And for the question "where do I host open-weight models with EU data sovereignty", providers like Nebius, Hetzner or OVHcloud are the practical foundation, not model builders, but the place where the sovereignty argument becomes real. The EU initiative OpenEuroLLM is working on an open, multilingual model, but at the time of this article it was not yet available as a usable product.

Reading Benchmarks Right: Trust No Single Number

Before you base a decision on a benchmark score, you should know how these numbers are produced and where they mislead. The main platforms for checking yourself:

The most important blind spot is contamination: MMLU has leaked substantially into training data, and studies find contamination rates above 90 percent on popular benchmarks. A model can know a question because it saw the answer in training, not because it solves it. Dynamic, continuously refreshed benchmarks like LiveCodeBench are the best countermeasure. Bottom line: use several sources, not one number, and test on your own task in the end.

Data Protection Under GDPR: The Four Paths

For a European company, whether Mittelstand or large enterprise, data protection is often the actual decision. There are four paths, sorted by data sovereignty:

Path 1 — API to a US provider: Data leaves the EU unless you pin processing to an EU region (Azure OpenAI EU, Google Vertex EU, Anthropic via Bedrock/Vertex EU). The legal basis is the EU-US Data Privacy Framework, currently in force but legally challenged. Practical minimum: DPA, standard contractual clauses, Zero Data Retention where available.

Path 2 — API to a Chinese provider: Data flows to China, China's data laws apply, no adequacy decision. For regulated personal EU data, effectively ruled out.

Path 3 — Self-hosting open weights on EU infrastructure: No data leaves, because the weights run locally and send nothing to the provider. That is exactly why Chinese and European open-weight models are usable for sensitive workloads even though the maker is foreign. The model is math; the risk lives in the service.

Path 4 — Fine-tune an open-weight model for a narrow task and self-host it: The strongest pattern for sensitive data. A small open-weight model on your own infrastructure, fine-tuned for a clearly scoped task (say PII extraction or contract analysis), processes sensitive data without ever handing it outside. Important: mask PII before fine-tuning; no inference filter recovers from training on unmasked data.

ℹ️

The EU AI Act Has Been Live Since August 2026

Since 2 August 2026, the EU AI Act's GPAI obligations are enforced: technical documentation, training-data summaries, copyright compliance. Models under a free open-source license are exempt from most transparency obligations unless they count as systemic risk (from around 10^25 FLOPs of training compute). Fines reach up to 15 million EUR or 3 percent of global turnover.

Decision Logic: Which Model for Which Task

Instead of a ranking, a mapping by task. This is the actual answer of this article.

The honest meta-point: the coding leader is a closed US API with no direct EU hosting. The cheapest models per token are Chinese open-weight models you can self-host sovereignly in the EU. The most sovereign setup demands your own GPU expertise, and the strongest EU-managed option (Azure OpenAI EU) limits you to the GPT family.

Running a European company in 2026 means making a multi-dimensional trade-off, not picking a winner. This is the trade-off we make at IJONIS in Hamburg every day, with a different model per task. For building our products we use Claude Code, checked and executed in part through OpenAI's Codex. For sensitive work we run fine-tuned, self-hosted open-weight models, as in our cybersecurity product DeepMantis for GDPR-compliant PII extraction.

FAQ: LLM Providers Compared

What is the best LLM in 2026?

There is no best LLM, because the axes of evaluation point in different directions. For agentic coding, Claude Fable 5 and GPT-5.6 currently lead. For price-performance, Google's Gemini Flash. For data sovereignty, self-hosted open-weight models on EU infrastructure or Mistral. For classified environments, Aleph Alpha. The useful question is always "best for what", not "best".

Are Chinese AI models safe for European companies?

It depends on whether you use the API or the weights. The official API (DeepSeek, Kimi, GLM, MiniMax) sends data to servers in China, where China's data laws apply and no EU adequacy decision exists, effectively ruled out for personal data. The open-weight files, by contrast, can be run on your own EU infrastructure without any data reaching China, which is GDPR-compliant. One more thing to note: political censorship is trained into the weights and persists even when self-hosted.

What is the difference between open weights and open source?

Open weights means the trained weights are downloadable and run locally, but training data and pipeline stay behind, and the license may restrict uses. Open source per the OSI definition additionally requires disclosed training data and code. In practice almost no major model meets the strict open-source definition; even MIT- or Apache-licensed models like DeepSeek or Mistral hold back their training data. For practice, the license is what counts: MIT and Apache 2.0 allow free commercial use, Meta's Llama license does not.

Which AI model is GDPR-compliant?

The cleanest is a self-hosted open-weight model on EU infrastructure, because no data leaves your system. Among finished services, Mistral (Paris hosting, no US CLOUD Act) has the strongest position, followed by Azure OpenAI in EU regions and Anthropic or Google via the hyperscalers' EU regions with a DPA and standard contractual clauses. xAI/Grok has the weakest position, with active EU investigations. For details on running it yourself, see GDPR-Compliant AI: On-Premise LLM.

Why can't I use Llama 4 in the EU?

The Llama 4 Community License explicitly forbids companies headquartered in the EU from using the multimodal models. Since the entire Llama 4 family is multimodal, that affects all models. Meta cites regulatory uncertainty around the EU AI Act. The exception: end users of a product that incorporates Llama 4 models are not affected, and non-EU companies may distribute products with Llama 4 in the EU. An EU company, however, may not deploy the models itself.

How much cheaper are Chinese models really?

Substantially. DeepSeek V4 costs 0.30 USD per 1 million input tokens on its own API, against 10 USD for Claude Fable 5, so roughly 30 times cheaper. Zhipu describes GLM-5.2 as "roughly one-sixth of GPT-5.5". With self-hosting, there are no token costs at all after the hardware investment. The price gap is the main reason Chinese open-weight models are so attractive for high-volume tasks and self-hosting, provided data protection and censorship are settled.

Should I rely on a single benchmark score?

No. Benchmarks are useful, but each has blind spots: LMArena favours verbose answers, SWE-bench covers only Python, and many benchmarks have leaked substantially into training data (contamination above 90 percent on popular tests). Use several independent sources (LMArena, Artificial Analysis, SWE-bench) and test on your own task in the end. The only number that really counts is performance on your specific use case.


End of article

AI Readiness Check

Find out in 3 min. how AI-ready your company is.

Start now3 min. · Free

AI Insights for Decision Makers

Monthly insights on AI automation, software architecture, and digital transformation. No spam, unsubscribe anytime.

Let's talk

Questions about this article?.

Keith Govender

Keith Govender

Managing Partner

Book appointment

Auch verfügbar auf Deutsch: Jamin Mahmood-Wiebe

Send a message

This site is protected by reCAPTCHA and the Google Privacy Policy Terms of Service.