Nadella didn't just name the problem. He proposed a five-part trust framework, called out AI labs for what he sees as a hypocritical double standard on model distillation, and argued that the knowledge generated through AI use must compound inside the enterprise, not the vendor. Here is what the evidence supports.
Arrow's original paradox states that a seller of information risks giving it away for free just to prove its value to a buyer. Nadella argues that AI inverts this: now the buyer is the one at risk. Companies pay for AI services with subscription or API fees, but to get meaningful results they must simultaneously feed the system their proprietary business context, processes, errors, and corrections .
"In the AI age, the buyer risks giving away knowledge, just in order to use what they bought," Nadella wrote . Every prompt, agent tool call, correction, evaluation, and workflow trace becomes a signal donated to the model provider, not retained by the enterprise . The more deeply an organization uses a frontier model, the more institutional know-how leaks outward, compounding inside the provider's training pipeline rather than inside the company's own systems .
Multiple outlets characterized this as enterprises effectively "paying for intelligence twice" — once with cash, and again with something far more valuable: their own intellectual property .
Nadella's framing gives a sharper name to a problem administrators already face. The byproducts of every AI interaction — prompts, corrections, human feedback, evaluation traces, and adapted weights — constitute what he calls intelligence exhaust . This exhaust should accrue as institutional memory inside the enterprise's own trust boundary, but in the current model it flows outward to the vendor .
As a Databricks community analysis framed the core question: "as organizations use AI more widely, who owns the knowledge created through prompts, corrections, evaluations, workflows, and human feedback?" Nadella's answer is unambiguous: the enterprise must own it. A competitor could never buy that institutional knowledge, but companies are freely giving it away .
Nadella has reportedly described this dynamic as analogous to industrial offshoring — just as globalization hollowed out factory economies, unchecked AI usage risks hollowing out enterprise intellectual capital .
To address the risk, Nadella proposed a five-part framework — the Five Cs — as the principles enterprises must control within their own AI trust boundary :
The prescription is a hard trust boundary inside which the enterprise's evals, memory, adapted weights, and orchestration accumulate untouched by the model provider . One analysis noted that the Five Cs serve as a "requirements document for a class of infrastructure that Microsoft is building through Foundry, Azure AI, and Copilot Studio" .
Nadella explicitly called out leading AI labs — naming OpenAI and Anthropic — for what he described as a hypocritical double standard . His argument has two sides.
First, these labs rely on fair use rights to train their models on massive amounts of public data scraped from the internet. Second, they simultaneously impose restrictive terms that prevent others from distilling their proprietary models — that is, training smaller, cheaper models based on the outputs of their frontier systems .
"While the great innovation that comes from model providers having fair use rights to train models on public data is needed," Nadella wrote, "I find it ironic that the status quo is to then turn around and impose restrictive terms on distillation, and to reserve the right to learn from customer usage and interactions" .
Multiple outlets reported that Nadella's criticism was a direct swipe at labs like Anthropic that have vocally opposed distillation of their models . The core tension, as one report summarized it: "Why should one set of companies be allowed to train on the entire web, but then tell others they cannot use their outputs?"
Nadella further warned that if knowledge flows only in a single direction — from creators and enterprises up to model providers — then the economic value will concentrate with infrastructure and platform owners, not with the organizations that actually generate the knowledge .
Nadella's essay has significant implications. First, it reframes AI vendor lock-in not just as a cost or compatibility problem but as a structural knowledge leak. Second, it positions Microsoft's own AI infrastructure — Azure AI, Copilot Studio, and Foundry — as the answer, though the Five Cs framework is architecture-agnostic in principle . Third, it forces every enterprise buyer to ask a question that most have not been asking: as we use AI more deeply, who owns the learning?
Industry reactions were immediate. A LinkedIn analysis noted that the essay "puts a sharper label on a problem administrators already face: AI governance must cover the knowledge generated around the model, not only the documents uploaded to it" . Another observer called the Five Cs "the requirements document for a class of infrastructure" .
The reverse information paradox is not about whether to use AI. It is about whether the enterprise — or the vendor — will own what the AI learns.