Nvidia Is Buying Hugging Face for $12.9 Billion. "Stays Open" Covers Less Than You Think.
The pledge protects the hub. The risks sit in defaults, hosted services and evaluations.
What Nvidia announced, and what it left out
Nvidia announced on 3 September 2026 that it will acquire Hugging Face for $12,930,300,000 (Nvidia announcement). Reporting puts roughly $11.9 billion of that with stockholders and up to $1 billion in retention awards for employees. The deal is reported to close in the first half of 2027, pending regulatory approval, although Nvidia's own post gives no date.
The announcement makes four promises. Hugging Face will remain an open platform. Nvidia will keep supporting open-source and open-weight models from all model builders. Developers can choose their own clouds, frameworks, inference providers and accelerators. Nvidia hardware will not be required to build on or deploy through the platform. The Hugging Face team keeps its brand.
Three things are absent. There is nothing on governance, such as board seats, who makes roadmap calls, or whether Hugging Face keeps an independent trust-and-safety function. There is nothing on licensing for the platform or the hosted models. And there is no enforcement mechanism, because a blog post is not a merger agreement. The firmest line is the hardware one. Language about Nvidia resources "helping" with reliability, safety and evaluation is aspiration.
The price only makes sense as a strategic purchase
Hugging Face generates about $150 million a year in revenue, according to reporting by The Information, and its chief executive has said it is close to profitability. Its last priced round was in 2023: $235 million led by Salesforce Ventures at a $4.5 billion valuation. It reportedly turned down a $500 million Nvidia investment at a $7 billion valuation last year because it did not want one dominant investor.
| Marker | Value | Nvidia price as multiple |
|---|---|---|
| 2023 funding round | $4.5 billion | 2.9x |
| Declined Nvidia offer, 2025 | $7 billion | 1.8x |
| Annual revenue, reported | about $150 million | about 86x |
| Agreed price | $12.93 billion | 1.0x |
No revenue multiple justifies 86 times sales for a hosting and collaboration business. What Nvidia is buying is position: the default place where open models are published, found, evaluated and downloaded. The dominant investor Hugging Face once turned away is now its owner.
Three layers of "open"
The word open hides at least three separate things, and the pledge speaks mainly to the first.
- The hub layer: model files, datasets, model cards and licences, plus the ability to download and upload them. This is what the "stays open" pledge protects, and it is the layer least likely to change.
- The services layer: hosted inference, dedicated endpoints and training services. These already run on Nvidia GPUs, so a hardware vendor owning them changes who sets prices and capacity priorities.
- The defaults layer: which hardware path gets a first-class kernel, which cloud gets a one-click deploy button, which accelerator the leaderboards and evaluation harnesses are tuned on, and which backends the flagship libraries optimise first.
Where neutrality actually erodes
Dramatic failures are unlikely. Nobody expects Nvidia to delist a model that runs well on AMD silicon, and doing so would destroy the asset it just paid for. Erosion is slower and deniable.
Consider three plausible paths. A new open model lands, and the day-one optimised build exists only for Nvidia hardware, with other accelerators following weeks later. A hosted-inference product prices Nvidia capacity cheaply and every alternative as a standard tier. An evaluation leaderboard standardises on a harness whose latency numbers assume one vendor's kernels. None of these breaks the stated commitment that Nvidia hardware is not required. All of them tilt the market.
“A promise that hardware is not required says nothing about which hardware is easiest.”
These are risks, not findings. Nothing in the public record shows Nvidia steering the platform, and the deal has not closed. But a reader deciding how much to depend on the Hub is better served by watching these three signals than by arguing over whether the pledge is sincere.
The policy backdrop raises the stakes
Reporting from TechCrunch says officials in Washington have weighed restrictions on open-weight models, driven partly by Chinese labs such as Moonshot AI releasing models that match leading American ones on benchmarks at lower cost. Nvidia chief executive Jensen Huang and 24 other companies, Hugging Face among them, signed a letter urging the government to support open models rather than restrict them.
That alignment cuts both ways. A chip vendor with a large stake in open models has every incentive to lobby against restrictions, which helps the open-weight community. It also means the main distribution point for those models now shares its owner with the loudest commercial beneficiary of the policy fight. Concentration of that kind is a single point of dependence however benign the owner's intentions.
What an ML platform team should do this quarter
Nothing announced changes how the Hub behaves today, so this is hygiene rather than alarm. The aim is to make the Hub a convenient source, not a hard dependency.
- Pin every production model to a commit hash, not a branch name such as main.
- Mirror the weights, tokenizers and configs that production depends on into storage you control.
- Record the licence of each model at the revision you deploy, and re-check it when you upgrade.
- Keep one deployment path that runs on a second accelerator or cloud, even if it is slower, so the "hardware not required" claim stays testable.
- Track the closing conditions and any changes to the terms of service or acceptable-use policy.
from huggingface_hub import snapshot_download
# Pin to an exact commit, then copy to storage you control.
path = snapshot_download(
repo_id="org/model-name",
revision="<commit-sha>",
local_dir="/models/org-model-name",
)
print(path)
# To route all Hub traffic through an internal mirror:
# export HF_ENDPOINT=https://hf-mirror.internal.example.comWhat to watch before closing
Regulatory filings are the best early evidence, because commitments made to a competition authority are enforceable in a way a blog post is not. The next signals are whether the open-weight policy debate in Washington hardens, how competing hubs and mirrors respond, and whether the first Nvidia-owned roadmap items favour one hardware path. The pledge will be judged on those choices well before the deal formally closes.
Frequently asked questions
Related reading
Android Developer Verification Is Live in Four Countries. It Checks Who You Are, Not What Your App Does.
Google began enforcing Android developer verification on 30 September in Brazil, Indonesia, Singapore and Thailand. The check covers publisher identity for seven stores, not app safety, and ADB bypasses it.
Gartner Says $3.5 Trillion of AI Infrastructure Could Be Impaired. Read Your GPU Contract Before You Read the Headline.
Gartner's forecast of $3.5 trillion in AI infrastructure impairment is a write-down warning for owners. For engineers buying GPU capacity, the real exposure sits in contract terms.
Four Companies Say Humanoid Robots Are “in Production.” They're Measuring Four Different Things.
Every 2026 humanoid robot headline cites a different number as proof. Pulled apart, the four most-cited ones measure different things: a pilot, an R&D fleet, a service contract and a shipment count.