The warning no one expected from Microsoft’s CEO
Satya Nadella has never been one for dramatic pronouncements. The Microsoft CEO is known for his calm, almost clinical demeanor. So when he published a blog post on Sunday that reads like a warning shot at the very industry he’s helped build, people noticed.
His message to companies using AI is blunt: you’re paying twice. Once with money for tokens. And again with something far more precious—your proprietary knowledge.
“You essentially pay for intelligence twice, once with money, and again with something even more valuable: the proprietary knowledge you must reveal to make that intelligence useful,” Nadella writes. “The better you want the model to perform, the more of that knowledge you have to feed it!”
This isn’t a fringe concern. Venture capitalists like Jason Calacanis and Palantir CEO Alex Karp have been sounding similar alarms for months. But when the CEO of a company that has poured billions into OpenAI and Anthropic says it, the conversation shifts.
What Nadella means by “paying twice”
Here’s the core of his argument. When your company uses a proprietary AI model, you’re not just renting intelligence. You’re training it.
Every prompt your employees write. Every correction they make when the model gets something wrong. Every tool the agent touches. Nadella calls this “exhaust,” and he says it gets distilled into institutional know-how.
“Every correction is distilled into institutional know-how,” he writes. “This is the kind of knowledge a competitor could never buy.”
Think about that for a second. You’re teaching a model the nuances of your business—your pricing strategies, your customer pain points, your internal workflows. And the model maker gets to keep all of it. The concern is that labs like OpenAI and Anthropic could one day use that knowledge to compete against their own customers.
The distillation double standard
Nadella’s solution is as elegant as it is pointed. He argues that if AI companies get to scrape the entire internet to train their models, then enterprises should have the right to study those models in return.
“Distillation” is the practice of using a model’s outputs to train a cheaper, more efficient model. In February, Anthropic accused Chinese open source models of sending millions of prompts to Claude to improve their own systems. The company urged the U.S. government to crack down on export controls.
Nadella sees hypocrisy here. “While the great innovation that comes from model providers having fair use rights to train models on public data is needed, I find it ironic that the status quo is to then turn around and impose restrictive terms on distillation,” he writes.
You can’t have it both ways, in other words. If the world’s data is fair game for training, your model’s outputs should be fair game for learning.
What Nadella wants companies to do
His advice is exactly what you’d expect from the CEO of a giant cloud provider. He wants companies to:
- Retain ownership of all data—prompts, feedback, everything
- Build proprietary learning environments on the cloud (where your data likely already lives)
- Create “orchestration layers” that let you switch between AI models easily
That last point is key. Instead of being locked into one provider, companies should be able to route requests across multiple models. Tools called AI “gateways” are already doing exactly this, and they’re growing fast.
Nadella never says the words “open source” in his post. But the subtext is unmistakable.
The on-prem shift is already happening
Here’s the thing: enterprises aren’t waiting for permission. Many of them are already moving to open source models installed on their own servers.
Idit Levine, CEO of Solo.io, which makes networking and security software for enterprise AI systems, says she’s seeing this shift play out in real time. Her customers start with proprietary models, then start asking questions.
“Can I take an open source model and run it on-prem? It will do almost 90% of what the big one’s doing. It will cost way less,” Levine told TechCrunch. “They understand that, and they can control it.”
Solo.io’s technology powers the Linux Foundation’s Agentgateway project. Its customers include T-Mobile, ADP, and SAP. Levine sees on-prem open source models as the next big wave in enterprise AI.
She’s not alone. Vercel, the web hosting platform that recently added AI model-switching tools, and OpenRouter, which helps developers route requests across AI models, are both seeing surges in traffic to open models. Last month, open models accounted for 29% of all traffic routed through Vercel’s gateway.
What this means for the future of enterprise AI
When the CEO of Microsoft—a company with deep financial ties to both OpenAI and Anthropic—openly urges companies using AI to be wary of proprietary models, something has shifted.
The economics are compelling. Open models are getting close to proprietary performance at a fraction of the cost. And the data ownership argument is getting harder to ignore. Why would you hand your competitive advantage to a model maker when you could keep it in-house?
Nadella’s closing line sums it up: “In consuming intelligence, you are creating intelligence. And what you create should belong to you.”
Whether you agree with him or not, the trend is clear. Companies are waking up to the hidden cost of proprietary AI. And they’re starting to look for alternatives.
For more on how to protect your data when working with AI, check out our guide on AI data ownership best practices. And if you’re evaluating model options, our breakdown of open source vs proprietary AI models can help you decide.
