---
title: "IBM watsonx.ai | Ethical Stack"
url: https://ethicalstack.ai/providers/ibm-watsonx/
catalog_version: f6baff2119d0e9158520da7fbe4232011dac79f25bd08757436d7a1dbd593db2
---

# IBM watsonx.ai

Enterprise model platform for hosted foundation-model inference, prompt workflows and tuning.

Canonical profile: https://ethicalstack.ai/providers/ibm-watsonx/

Scope: watsonx.ai SaaS foundation-model API and Prompt Lab; excludes self-managed watsonx deployments and third-party cloud services outside IBM’s described route.

Published overall: 3.8; 5/6 dimensions rated.

Round the equal-weight mean of available numerical ratings to one decimal; require at least four of six for an overall score. BDS status stays outside the mean; for eligible profiles, a boycott target caps the final score at 2/10 and a pressure target subtracts one point (minimum 1). Not listed and not checked do not adjust the score.

Pressure target: −1 overall point.

## Energy practices

Finding: 3/10

Assessment: https://ethicalstack.ai/providers/ibm-watsonx/#energy

Public docs establish the IBM watsonx.ai SaaS inference endpoints and customer-selected region route; they do not establish its request-level physical footprint. The API lets customers choose a model ID and request generation parameters; model selection and token-based usage are practical controls, without measured energy savings.

Reason: 1 + 1 reporting + 0 electricity + 1 controls = 3/10. This grades documented practices and transparency.

Argument: This practices and disclosure grade covers IBM watsonx.ai SaaS inference endpoints and customer-selected region. Public product/API documentation establishes how this route operates and the listed user controls, but gives no measured per-request energy, emissions or water. A corporate electricity claim is not allocated to this route.

Type: argument; confidence: medium

Scope (dimension): IBM watsonx.ai SaaS inference endpoints and customer-selected region

Research reviewed: not recorded; evidence date: not recorded

Unknowns: Request-level electricity, emissions, water use, serving utilization and any route-specific clean-power matching are not reported for IBM watsonx.ai SaaS inference endpoints and customer-selected region.

```json
{
  "method": "practices-transparency-v1",
  "scope": "IBM watsonx.ai SaaS inference endpoints and customer-selected region",
  "components": {
    "disclosure": {
      "score": 1,
      "reason": "Official documentation describes the IBM watsonx.ai SaaS inference endpoints and customer-selected region operating boundary, but does not publish a dated quantitative energy, emissions or water result for this route.",
      "sourceUrls": [
        "https://www.ibm.com/docs/en/watsonx/saas?topic=solutions-rest-api",
        "https://cloud.ibm.com/docs/apis/watsonx-ai"
      ]
    },
    "electricity": {
      "score": 0,
      "reason": "The reviewed sources do not map IBM watsonx.ai SaaS inference endpoints and customer-selected region to a site-specific electricity mix or time-matched clean-power supply.",
      "sourceUrls": [
        "https://www.ibm.com/docs/en/watsonx/saas?topic=solutions-rest-api",
        "https://cloud.ibm.com/docs/apis/watsonx-ai"
      ]
    },
    "demand": {
      "score": 1,
      "reason": "The API lets customers choose a model ID and request generation parameters; model selection and token-based usage are practical controls, without measured energy savings.",
      "sourceUrls": [
        "https://www.ibm.com/docs/en/watsonx/saas?topic=solutions-rest-api",
        "https://cloud.ibm.com/docs/apis/watsonx-ai"
      ]
    }
  },
  "actualImpactMeasured": false
}
```

- [IBM watsonx.ai REST API](https://www.ibm.com/docs/en/watsonx/saas?topic=solutions-rest-api) (primary; checked 2026-10-24)

- [IBM watsonx.ai regional API endpoints](https://cloud.ibm.com/docs/apis/watsonx-ai) (primary; checked 2026-10-24)

## Training data

Finding: Depends on the model

Assessment: https://ethicalstack.ai/providers/ibm-watsonx/#training-rights

watsonx.ai routes requests to customer-selected foundation models; training data provenance and usage rights vary by model publisher.

Reason: watsonx.ai routes requests to customer-selected foundation models; training data provenance and usage rights vary by model publisher.

Argument: IBM’s security page describes handling of submitted prompts and outputs but does not establish the training corpus or permissions for the customer-selected foundation models. Prompt privacy and original model training data are separate questions.

Type: argument; confidence: medium

Scope (profile): watsonx.ai SaaS foundation-model API and Prompt Lab; excludes self-managed watsonx deployments and third-party cloud services outside IBM’s described route.

Research reviewed: not recorded; evidence date: not recorded

Unknowns: Selected foundation model, corpus inventory, source permissions, tuning data rights and publisher-specific terms need model-level review.

```json
{
  "method": "training-rights-evidence-v1",
  "scope": "The stated training release or selected model",
  "components": null,
  "routeDependency": "watsonx.ai routes requests to customer-selected foundation models; training data provenance and usage rights vary by model publisher.",
  "modelReference": null
}
```

- [Security and privacy for IBM watsonx.ai foundation models](https://www.ibm.com/docs/en/watsonx/saas?topic=watsonx-security-foundation-models) (primary; checked 2026-10-24)

- [IBM watsonx.ai REST API](https://www.ibm.com/docs/en/watsonx/saas?topic=solutions-rest-api) (primary; checked 2026-10-24)

## Your data & privacy

Finding: 8/10

Assessment: https://ethicalstack.ai/providers/ibm-watsonx/#privacy

IBM says foundation-model prompts and outputs are not logged and are not used to improve IBM models; assets are stored only when users choose to save them. It notes IBM Cloud or AWS hosting and optional governance monitoring.

Reason: Clear prompt logging and training-use statements plus user-controlled saving, with documented exceptions for optional governance monitoring and deployment route.

Argument: IBM’s watsonx.ai security documentation says prompts and outputs submitted through Prompt Lab or API are not logged and are not used to improve IBM models; unsaved prompt text remains in browser cache, while saved assets are stored in the customer project bucket. Optional watsonx.governance monitoring can store payloads in a customer-administered database.

Type: argument; confidence: medium

Scope (profile): watsonx.ai SaaS foundation-model API and Prompt Lab; excludes self-managed watsonx deployments and third-party cloud services outside IBM’s described route.

Research reviewed: not recorded; evidence date: not recorded

Unknowns: The chosen model, regional endpoint, saved asset configuration, governance monitoring, and any model-specific terms should be checked for the deployed account.

- [Security and privacy for IBM watsonx.ai foundation models](https://www.ibm.com/docs/en/watsonx/saas?topic=watsonx-security-foundation-models) (primary; checked 2026-10-24)

## Openness

Finding: 4/10

Assessment: https://ethicalstack.ai/providers/ibm-watsonx/#openness

API interfaces and model selection are documented, with managed service code and infrastructure remaining controlled by IBM and its cloud partners.

Reason: Documented models and APIs with provider-controlled SaaS runtime.

Argument: watsonx.ai exposes REST APIs and model catalogs, but the managed SaaS serving runtime is not supplied as a self-hostable API. IBM has separate software deployments and open-source model access that are outside this SaaS scope.

Type: argument; confidence: medium

Scope (profile): watsonx.ai SaaS foundation-model API and Prompt Lab; excludes self-managed watsonx deployments and third-party cloud services outside IBM’s described route.

Research reviewed: not recorded; evidence date: not recorded

Unknowns: Self-managed IBM software and selected third-party foundation models have separate openness terms.

- [Security and privacy for IBM watsonx.ai foundation models](https://www.ibm.com/docs/en/watsonx/saas?topic=watsonx-security-foundation-models) (primary; checked 2026-10-24)

- [IBM watsonx.ai REST API](https://www.ibm.com/docs/en/watsonx/saas?topic=solutions-rest-api) (primary; checked 2026-10-24)

- [IBM watsonx.ai regional API endpoints](https://cloud.ibm.com/docs/apis/watsonx-ai) (primary; checked 2026-10-24)

## Worker protections

Finding: 6/10

Assessment: https://ethicalstack.ai/providers/ibm-watsonx/#labour

IBM publishes global employee standards, workforce indicators, employee reporting channels, and supplier conduct expectations; none is specific to Granite training labor.

Reason: 1 base + 2 conditions + 2 voice and remedy + 1 assurance = 6/10. IBM documents group-level systems; evidence for Granite labor and independent outcomes is limited.

Argument: IBM reports pay-equity and workforce-safety indicators and sets standards for wages, hours, freedom of association, and suppliers. It also describes employee and supplier reporting channels with non-retaliation. These group-level protections do not establish conditions for Granite data, evaluation, or infrastructure workers. This entry carries the same developer/operator finding to IBM watsonx.ai; it does not establish that this product was deployed under every cited relationship.

Type: argument; confidence: medium

Scope (dimension): IBM: the documented developer/operator record, not proof of deployment of IBM watsonx.ai.

Research reviewed: not recorded; evidence date: not recorded

Unknowns: The sources do not confirm which Granite contributors or suppliers are covered, or publish AI-workforce-specific pay, locations, grievance outcomes, or independent labor-audit results.

```json
{
  "method": "worker-safeguards-evidence-v1",
  "entity": "models/granite-4-2",
  "company": "",
  "scope": "IBM as Granite developer; group-level employment/supplier systems are not proof of conditions for this release’s AI workforce.",
  "components": {
    "conditions": {
      "score": 2,
      "reason": "IBM publishes global employee standards on wages, hours, freedom of association, safety and supplier expectations, plus aggregate workforce metrics; it does not show model-specific coverage.",
      "sourceUrls": [
        "https://www.ibm.com/responsibility/data-and-policies",
        "https://www.ibm.com/investor/governance/risk-compliance-integrity"
      ]
    },
    "voice": {
      "score": 2,
      "reason": "IBM describes Open Door/Speak-Up and external channels, review of reports, and non-retaliation; no Granite-specific grievance data is disclosed.",
      "sourceUrls": [
        "https://www.ibm.com/responsibility/data-and-policies",
        "https://www.ibm.com/investor/governance/risk-compliance-integrity"
      ]
    },
    "assurance": {
      "score": 1,
      "reason": "IBM describes compliance reviews and supplier standards, but these sources do not provide independent worker-level assurance or remediation outcomes for Granite labor.",
      "sourceUrls": [
        "https://www.ibm.com/responsibility/data-and-policies",
        "https://www.ibm.com/investor/governance/risk-compliance-integrity"
      ]
    }
  },
  "disclosureLimited": false
}
```

- [IBM Data and Policies](https://www.ibm.com/responsibility/data-and-policies) (primary; checked not recorded)

- [IBM Risk, Compliance and Integrity](https://www.ibm.com/investor/governance/risk-compliance-integrity) (primary; checked not recorded)

## Military ties

Finding: 3/10

Assessment: https://ethicalstack.ai/providers/ibm-watsonx/#military-contracts

IBM publicly markets defense AI and was selected for the Missile Defense Agency SHIELD contract; neither source establishes Granite deployment.

Reason: 1 + 0 use restrictions + 0 enforcement & oversight + 2 relationship disclosure = 3/10. Known defense ties lower this rating; safeguards can improve it within the relationship’s cap.

Argument: IBM says it will support the MDA SHIELD program and promotes AI for defense and intelligence work. Granite weights use Apache 2.0 terms without a military-use prohibition in the reviewed card; no source links this checkpoint to that contract or describes its military end-use oversight. This entry carries the same developer/operator finding to IBM watsonx.ai; it does not establish that this product was deployed under every cited relationship.

Type: argument; confidence: medium

Scope (dimension): IBM: the documented developer/operator record, not proof of deployment of IBM watsonx.ai.

Research reviewed: not recorded; evidence date: not recorded

Unknowns: No Granite-specific defense contract, deployment, military-use restriction, or downstream enforcement record was established.

```json
{
  "method": "military-ties-priority-v2",
  "entity": "models/granite-4-2",
  "company": "",
  "scope": "IBM parent relationship; no Granite deployment or checkpoint-specific military contract is established.",
  "components": {
    "restrictions": {
      "score": 0,
      "reason": "The Granite card lists Apache 2.0 and no model-specific military-use restriction; the license is not a downstream deployment control.",
      "sourceUrls": [
        "https://huggingface.co/ibm-granite/granite-4.2-8b"
      ]
    },
    "oversight": {
      "score": 0,
      "reason": "IBM describes governance for defense customers, but the sources do not establish monitoring or enforcement over use of downloadable Granite weights.",
      "sourceUrls": [
        "https://newsroom.ibm.com/2026-02-05-ibm-to-support-missile-defense-agency-shield-contract",
        "https://www.ibm.com/industries/government/defense-intelligence"
      ]
    },
    "transparency": {
      "score": 2,
      "reason": "IBM publicly identifies its SHIELD selection and markets AI-enabled defense and intelligence solutions.",
      "sourceUrls": [
        "https://newsroom.ibm.com/2026-02-05-ibm-to-support-missile-defense-agency-shield-contract",
        "https://www.ibm.com/industries/government/defense-intelligence"
      ]
    }
  },
  "disclosureLimited": true,
  "relationship": "broad-defense",
  "relationshipReason": "IBM publicly supports the MDA SHIELD program and sells AI-enabled defense/intelligence services. This is a company relationship; no Granite checkpoint deployment is established.",
  "score": 3,
  "baseScore": 1,
  "safeguardPoints": 2,
  "safeguardAdjustment": 2,
  "rawScore": 3,
  "cap": 3
}
```

- [IBM to Support Missile Defense Agency SHIELD Contract](https://newsroom.ibm.com/2026-02-05-ibm-to-support-missile-defense-agency-shield-contract) (primary; checked not recorded)

- [IBM Defense and Intelligence Solutions](https://www.ibm.com/industries/government/defense-intelligence) (primary; checked not recorded)

- [Official model card or model release repository](https://huggingface.co/ibm-granite/granite-4.2-8b) (primary; checked 2026-10-24)

## BDS targets

Finding: Pressure target

Assessment: https://ethicalstack.ai/providers/ibm-watsonx/#israel-palestine

IBM is named in the BNC No Tech campaign’s discussion of technology companies; this is a scoped pressure-campaign match, not a universal BDS status.

Reason: Campaign category, excluded from numerical scoring.

Argument: The official BNC No Tech campaign page names IBM alongside other technology companies in its discussion of systems serving the Israeli military. This supports a pressure-campaign match at the IBM parent-company level; it does not establish a use or contract involving every Granite checkpoint. This entry carries the same developer/operator finding to IBM watsonx.ai; it does not establish that this product was deployed under every cited relationship.

Type: argument; confidence: medium

Scope (dimension): IBM: the documented developer/operator record, not proof of deployment of IBM watsonx.ai.

Research reviewed: not recorded; evidence date: not recorded

Unknowns: This match is limited to the named companies in the BNC No Tech campaign. It does not cover every BDS campaign, local group, investment, supplier, or product deployment; lists and ownership can change.

- [BNC target list (not checked for this company)](https://bdsmovement.net/Guide-to-BDS-Boycott) (campaign; checked 2026-10-24)

- [BNC target list (not checked for this company)](https://bdsmovement.net/no-tech-oppression-apartheid-or-genocide) (campaign; checked 2026-10-24)

## Reading the evidence

- Assessments are provisional editorial judgments. Cite the profile and the underlying sources, and retain confidence, scope and unknowns.

- Unknown, not-applicable and model-dependent are different states. Missing evidence does not establish good or bad conduct.

- Company-level evidence does not establish use of a particular product or model. Account plan, model, host and route can change an assessment.

- Energy scores describe documented practices and transparency, not measured request emissions. Zero component points can mean an evidence gap.

- Published overall scores require at least four of six numerical dimensions. Preserve coverage and BDS adjustments; BDS itself is categorical.

- No named BDS target found is limited to the reviewed campaign sources and is not approval. Personalized priorities do not change the published overall score.

- Review and source-check dates describe the research, not this deployment. Fetch current primary sources when the decision requires current verification.

Methodology: https://ethicalstack.ai/methodology/