GPTMap

OpenAI and Poland's NASK sign an AI safety partnership: a new EU-side institute partner

Announced 2026-10-23 on both sides: NASK's AI Security Research Center — acting as Poland's AISI — will work with OpenAI on frontier-model safety evaluation, with quotes and the Daybreak track record behind it.

TL;DR
On 2026-10-23, OpenAI and Poland's research institute NASK announced an AI safety research partnership: NASK is led by its AI Security Research Center, acting as Poland's AISI, jointly researching the safety of increasingly capable AI systems. The only-in-the-EU phrasing is NASK's own, and July's Daybreak-backed CERT Polska vulnerability findings are cited as track record.
The OpenAI-NASK partnership is an AI safety research agreement: NASK's AI Security Research Center, which performs the role of Poland's AI Security Institute (AISI), will research the safety of increasingly capable AI systems together with OpenAI — evaluating systems, finding weaknesses, and strengthening safeguards, plus engaging with international technical standards work; announced 2026-10-23.

On 2026-10-23, OpenAI and Poland's research institute NASK announced an AI safety research partnership. OpenAI's official news RSS carried the item at 00:00 GMT under the title "OpenAI and Poland's NASK partner to advance AI safety and security," with the description "OpenAI and Poland's NASK are partnering on AI safety, security, and technical research to strengthen safeguards and support a more resilient digital ecosystem" (the article page returned 403 to this site, so the RSS description and NASK's own full announcement are the primary sources here). NASK's same-day announcement is blunter: its headline reads Jedyna taka umowa w UE — the only such agreement in the EU.

What the agreement is

In NASK's wording: new threats require joint action, and what the two organizations signed is a cooperation agreement on AI safety research. It combines their knowledge and experience to identify threats related to this technology faster, protect against them better, and more effectively verify how advanced AI methods can help increase the security and resilience of digital services.

The announcement gives no project list, funding figures, or timeline — what it does give is the framework and the named leads on both sides.

Who leads each side

On the NASK side, the lead is the Ośrodek Badań nad Bezpieczeństwem Sztucznej Inteligencji (AI Security Research Center). The announcement states plainly that this center performs the role of Poland's AI Security Institute (AISI) and will research the safety of increasingly advanced AI systems together with OpenAI; the analyses it conducts are meant to help evaluate those systems, detect their weak points, and strengthen safeguards.

The OpenAI-side quote comes from Tom Duff Gordon, VP and head of public policy for EMEA. His point, in substance: Poland has excellent scientists and distinctive technology talent, and they already take part in research at OpenAI; as AI capabilities grow, an outside perspective is needed to verify assumptions, test systems, and strengthen safeguards — and the agreement with NASK makes that a joint effort, bringing Polish research contributions into international AI safety work.

NASK director Radoslaw Nielek's quote describes the center's day-to-day research surface: studying new threats, developing safeguards, detecting AI-generated content, and examining how AI can be turned to harmful use — and how those threats differ depending on the language of the conversation. He calls the agreement an important step and frames the EU-only distinction as recognition of his team's specialists.

Where the EU-only claim comes from

Jedyna taka umowa w UE is NASK's own headline, and the same phrase appears in Nielek's quote — "the only such agreement in the European Union, which is an important distinction and recognition of our specialists' competence for us." OpenAI's RSS description makes no such comparison.

This site reports it as an attribution: it is one signatory's characterization, not an independently verified census. What other arrangements exist between EU-based AI safety institutes and model developers is not something this article audits.

Where it sits in OpenAI's institute sequence

The announcement places the signing in an existing series: OpenAI's collaborations with the US Center for Advancing Standards and Innovation for Super Intelligence (CAISSI), the UK AI Security Institute (AISI), and other public research institutions "helped detect and remove vulnerabilities in AI agents and models" and contributed to improving the safety of the most advanced models — followed by the line that Poland now joins that group.

A separate section covers standards (Bezpieczna AI wymaga wspólnych zasad — safe AI requires common rules): OpenAI has advocated that the United States cooperate with other countries on international technical standards for the most advanced AI systems, with AI safety institutes and standardization organizations helping to develop them. Common rules for evaluating AI capabilities, analyzing risk, testing safeguards, and reporting incidents would let countries compare results and respond to threats across borders. NASK's contribution is the Polish AI safety research knowledge it uses daily to protect public services and the Polish information space; the announcement argues that national partners help standards respond to concrete threats and local conditions of AI use.

The backstory: Daybreak and the six MikroTik vulnerabilities

The signing did not start from zero — the announcement itself supplies a checkable history: in July, CERT Polska, the incident response team operating within NASK, received access to advanced OpenAI models for cybersecurity work through the Daybreak program. Using that access, the team found six vulnerabilities in MikroTik RouterOS; chaining some of them allowed taking control of a device without logging in. The vendor shipped patches, and CERT Polska confirmed the patches block the demonstrated attack methods.

That backstory is worth attention because it shows what these collaborations actually produce: not a letter of intent, but a closed loop of vulnerability discovery and vendor patches.

What it means for ChatGPT and API users

This announcement lives at the policy and safety-research level: no product changes, no model availability changes, no pricing changes. For readers, the substance is in three places — OpenAI's institute network gains an EU-side member (the only one in the EU, per NASK's own framing); Poland's counterpart is the center performing the national AISI role; and Daybreak-style access programs have another documented instance of concrete output. If safety-evaluation or standards work produces tangible results, this site will follow up.

Next steps

Key points

  • Timing and channels: OpenAI's official news RSS carried the item at 2026-10-23 00:00 GMT under the title OpenAI and Poland's NASK partner to advance AI safety and security (description verbatim: partnering on AI safety, security, and technical research to strengthen safeguards and support a more resilient digital ecosystem; the article page returned 403 to this site that day); NASK published a full announcement the same day (on-page date 23 Października 2026)
  • Who leads each side: on the NASK side, the Ośrodek Badań nad Bezpieczeństwem Sztucznej Inteligencji (AI Security Research Center), which the announcement states performs the role of Poland's AI Security Institute (AISI); the OpenAI-side quote comes from Tom Duff Gordon, VP and head of public policy, EMEA
  • Scope (per the announcement's own wording): combining the two organizations' knowledge and experience to identify AI-related threats faster and protect against them better; joint research into the safety of increasingly advanced AI systems, with analyses that help evaluate the systems, detect their weak points, and strengthen safeguards
  • The only-such-agreement-in-the-EU claim is NASK's own: the headline reads Jedyna taka umowa w UE and director Radoslaw Nielek repeats it in his quote — this site reports it as an attribution, not an independent finding
  • The track record is concrete (same announcement): in July, CERT Polska — part of NASK — received access to advanced OpenAI models for cybersecurity work through the Daybreak program and used them to find six vulnerabilities in MikroTik RouterOS, some of which chained to device takeover without login; the vendor shipped patches and the team confirmed they block the demonstrated attacks
  • Context: the announcement places the signing in OpenAI's sequence of collaborations with public research institutions — naming the US CAISSI and the UK AI Security Institute, crediting such work with finding and removing vulnerabilities in AI agents and models — and adds that Poland now joins that group

Frequently asked questions

NASK is a Polish national research institute — its English institute page self-describes as specializing in cybersecurity — and its cybersecurity arm includes CERT Polska, the well-known incident response team. The center acting as Poland's AISI (AI Security Institute) inside NASK is its AI Security Research Center (Ośrodek Badań nad Bezpieczeństwem Sztucznej Inteligencji).

Official references

Related articles

Subscribe to GPTMap Weekly

One email every Monday: curated OpenAI updates, deep dives, and best practices. No ads, unsubscribe anytime.

Submitting opens Buttondown in a new tab to confirm your subscription.

GPTMap EditorialPublished 2026-10-24 5 min read
Test environment (EEAT)
Last tested: 2026-10-24
Model used: Policy/safety announcement; no model version change (current family per world-state: GPT-5.6 tiers + GPT-6 Astra)