Nvidia buys Hugging Face, Stripe buys OpenRouter: your AI stack has new owners

The layer your team builds on is getting bought. Nvidia is reportedly paying almost $13 billion for Hugging Face. Stripe grabbed OpenRouter. Amazon took DuckLabs. And a federal judge just ruled the Pentagon broke the law when it tried to blacklist Anthropic. Different deals, same story: the companies that own your AI stack are changing hands, and the terms you signed up for may not hold. Let me catch you up.

The deep cut

• The neutral middle layer is up for sale. Nvidia, Stripe, and Amazon are buying the routers and repositories your team already depends on.
• A buyer's incentives outlive its promises. MotherDuck's CEO says Amazon keeps DuckDB open only because open drives compute to AWS.
• A vendor's spine is a real dependency. Anthropic kept its Pentagon red lines, ate a blacklist, and won in court.

The GitHub of AI now has an owner

Nvidia's reported $12.9 billion deal for Hugging Face puts the biggest open-model repository under one company. Hugging Face hosts over 3 million models and had 13 million users last year. That is where a lot of teams go to grab weights, benchmarks, and datasets. Now the chipmaker owns the shelf.

The logic is plain. Nvidia wants to sell chips, so it wants open models to stay cheap and everywhere. As one Hugging Face user put it, Nvidia's strategy is pumping open source so private labs get commoditized while inference providers keep buying Nvidia hardware to serve tokens. Note that Hugging Face turned down a $500 million Nvidia offer last year because it didn't want one dominant investor. Now it may get one as an owner.

Routing and billing under one roof

Stripe paid over $7 billion for OpenRouter, the top supplier of open-weight models to businesses. OpenRouter is not a single API. It picks the cheapest, fastest, most reliable model for each call based on live usage. That sits right next to Stripe's push into token billing. As Patrick Collison put it, tokens are the central currency for companies building with AI.

If you route through OpenRouter to stay model-agnostic, the open question is whether it stays neutral once it lives inside a payments company. One analyst calls that the most important thing to watch. A router that quietly favors a partner is no longer a router. Read your routing layer's terms the same way you'd read a billing contract, because now they may be the same company.

Open source with a landlord

Amazon is buying DuckLabs, the team behind DuckDB, the fast open-source database developers use to query data without a warehouse. Amazon says DuckDB stays free under the MIT license, run by a nonprofit foundation. That is the reassuring version.

MotherDuck's Jordan Tigani, who helped build Google's BigQuery, names the pattern flat: wait until an open source project gets big, then launch it as a service. He also says this is probably good for DuckDB, because if it becomes the standard, it drives compute onto AWS, which is where Amazon makes money. The license protects the code. It does not protect you from a landlord who benefits when your data lives on their storage.

The vendor that held its line

Anthropic gives you the other side. It set two red lines with the Pentagon: no mass surveillance of Americans, no autonomous weapons that kill without human oversight. Other labs signed the broader "any lawful use" terms. Anthropic refused, got labeled a supply chain risk, and got cut off across federal agencies.

Then a judge sided with it. Judge Rita Lin ruled the blacklist was unlawful retaliation in violation of the First Amendment and "arbitrary and capricious." She also noted Anthropic undisputedly lacks any backdoor once it hands models to the government. The lesson for you: a vendor with clear values is more predictable, not less. Anthropic's red lines are public, so you know what it will and won't do before you commit.

Three questions for your team

• If Nvidia owns Hugging Face and Stripe owns OpenRouter, which of our AI dependencies just got a new owner, and what did their terms actually promise us?
• Where are we trusting a "neutral" routing or open-source layer that now benefits when we spend more on the parent company's chips, storage, or payments?
• If a vendor got blacklisted or changed its rules tomorrow, like Anthropic almost did, how fast could we move that workload, and have we ever tested it?