Based on published licence terms, Qwen3.6-35B-A3B ships under Apache 2.0 with no use restrictions, making self-hosted commercial deployment viable. However, opaque training-data disclosure and Chinese origin create EU AI Act Art. 53 transparency and data-transfer risks that deployers should document before placing personal data into prompts.
Sovereignty
Licence: Apache 2.0Commercial: UnrestrictedTraining data: UndisclosedOrigin: China (Hangzhou)
Training-data opacity vs EU AI Act Art. 53(1)(d): no public training-content summary template, no copyright opt-out handling disclosure, no cutoff date published on the model card.
Data transfer / jurisdiction: Alibaba Cloud offers an EEA DPA and Frankfurt region, but PRC data-access laws (DSL, PIPL Art. 41) remain a Schrems-II-style concern for any interaction with vendor-hosted endpoints.
No published systemic-risk, bias, or red-team evaluation; downstream deployers in high-risk Annex III use cases must generate their own conformity evidence.