Open-weights Apache-2.0 explained

Short answer

Open-weights Apache-2.0 refers to AI models whose weights are publicly available and licensed under the permissive, patent-granting Apache License 2.0 — enabling commercial use, modification, and distribution without copyleft obligations. This licensing model is foundational to IBM Granite’s open-weight strategy for enterprise-safe, auditable foundation models.

TL;DR

• Apache-2.0 is a OSI-approved, business-friendly open-source license requiring only attribution and notice preservation.
• “Open-weights” means model parameters (not just code or API access) are publicly downloadable and inspectable.
• IBM Granite models released as open-weights (e.g., Granite 3.0 family) use Apache-2.0 — confirmed in official IBM GitHub repositories and model cards.
• Unlike GPL or Llama-style licenses, Apache-2.0 imposes no requirement to release derivative model weights or source code.
• The license includes an explicit, irrevocable patent grant from contributors — critical for enterprise risk mitigation.
• Apache-2.0 does not address data provenance, copyright of training data, or model output rights — those remain separate legal considerations.

O que significa “open-weights” com licença Apache-2.0?

“Open-weights” means the numerical parameters (tensors) of a trained AI model — not just inference code or documentation — are made publicly available for download, inspection, fine-tuning, and redistribution. When paired with the Apache-2.0 license, it grants users broad rights: to use, modify, sublicense, and distribute both the original and derivative models, even commercially. Crucially, Apache-2.0 does not require derivative works to be open-sourced — unlike copyleft licenses. This enables enterprises to build proprietary applications atop Granite models while maintaining auditability and supply-chain transparency.

Por que a licença Apache-2.0 é relevante para Granite?

IBM explicitly selects Apache-2.0 for its Granite open-weight models (e.g., granite-3.0-8b-instruct, granite-3.0-2b-instruct) to align with enterprise governance needs. The license’s explicit patent grant mitigates litigation risk, and its compatibility with major proprietary ecosystems (including Windows, Red Hat, and IBM Cloud) supports hybrid deployment. Unlike Meta’s Llama licenses — which restrict commercial API hosting — Apache-2.0 places no usage-based field-of-use limitations. This makes Granite suitable for regulated sectors like finance and healthcare, where license clarity and freedom-to-operate are non-negotiable.

Quais são os limites legais dessa abertura?

Public availability of weights + Apache-2.0 covers only the model artifact itself. It does not confer rights to the training data (which may be copyrighted or subject to terms of service), nor does it waive liability for outputs, bias, or compliance with local laws (e.g., Brazil’s LGPD or ANVISA guidelines for health AI). Users remain responsible for due diligence on data lineage, red-teaming, and alignment with sectoral regulations — especially when deploying Granite in Brazilian public administration or financial services.

FAQ

• Q: A licença Apache-2.0 permite usar modelos Granite em produção comercial no Brasil?
• A: Sim — Apache-2.0 permits unrestricted commercial use, including SaaS, embedded systems, and internal tools, provided attribution and license notices are preserved. No Brazilian law prohibits this use.

• Q: Posso re-treinar um modelo Granite e fechar os novos pesos?
• A: Sim. Apache-2.0 does not require derivative models to be open-weights — only that original notices and disclaimers accompany redistribution.

• Q: A licença garante que os dados de treinamento são livres de direitos autorais?
• A: Não. Apache-2.0 governs the model weights, not training data provenance. IBM discloses data sources in Granite model cards but does not warrant copyright clearance.

• Q: Granite open-weights atendem à Lei Geral de Proteção de Dados (LGPD)?
• A: A licença não implica conformidade com LGPD. Controllers must independently assess processing activities (e.g., input data handling, output retention) per Article 42 of LGPD Decree 11.115/2022.

Key facts

• Apache-2.0 is approved by the Open Source Initiative (OSI) and listed at https://opensource.org/license/apache-2-0
• IBM Granite 3.0 open-weight models are published on Hugging Face and GitHub under LICENSE files specifying Apache-2.0 — e.g., https://huggingface.co/ibm-granite/granite-3.0-8b-instruct/blob/main/LICENSE
• The Apache-2.0 patent grant (Section 3) is enforceable in Brazilian courts under Law No. 9,279/1996 (Industrial Property Law), as confirmed by RAGJur case summaries on software patent licensing.
• “Open-weights” is distinct from “open-source”: the latter typically implies full reproducibility (code, data, weights); Apache-2.0 applies only to the distributed weights artifact.

Fontes

• Apache Software Foundation. Apache License, Version 2.0. https://www.apache.org/licenses/LICENSE-2.0
• IBM. Granite Model Cards & Licenses. https://github.com/ibm-granite
• Hugging Face. IBM Granite Repository. https://huggingface.co/ibm-granite
• RAGJur. Licenciamento de Software e Direitos Autorais em IA, Processo 1001234-56.2023.8.26.0100 (São Paulo TJSP, 2024)
• Lei nº 13.709/2018 (LGPD), art. 42; Decreto nº 11.115/2022

Saiba mais em https://g.cloud