Britain is putting £100 million into an AI biosecurity lab. The £200 million from OpenAI and Anthropic is credits, not cash

The Cabinet Office said on 24 October that it is setting up an AI Biosecurity Lab, which it describes as the first organisation of its kind. The government funding named for the lab is £100 million. The job, as written, is to use frontier models to help public bodies notice a biological threat earlier and to speed the work of vaccines, treatments and other countermeasures. The first partners named on the public side are the UK Health Security Agency, the Animal and Plant Health Agency, the Defence Science and Technology Laboratory, and the medicines regulator.

The company money is a different instrument. The same announcement says the lab will launch with up to £200 million committed by two firms. OpenAI’s £100 million is compute and model credits, plus trusted access to relevant models through a programme it calls Rosalind. Anthropic’s is up to £100 million in model credits, trusted access and dedicated technical support. Google DeepMind is listed separately: its scientists will work with the lab, and it will look to provide access to Gemini and to specialised science models. “Look to” is not a cheque. Basecamp Research is to provide access to its own biology models. A credit is the right to run a model. It is not £200 million arriving in an account, and it is not a statement of how many experiments that credit will buy once the price of a run is known.

A lab is not yet a detection

The Chancellor’s note the same day puts the lab inside a wider National AI Biosecurity Initiative of £165 million: the £100 million for the lab, and £65 million for surveillance and for countermeasures against priority pathogens. That is a budget line. The announcement does not say where the lab will sit, who will direct it, or when the first capability will be in use. It does say the government intends the lab to take philanthropic money as well. Intends is not a gift that has been booked.

What a reader can hold onto is the split. Public money is for an institution. Company money, so far, is mostly the right to use the companies’ models, on terms the announcement does not publish. A threat the lab has actually detected is not in the note, because the lab has only just been announced.