AI AI basics: what it is and how it got here
Where AI training data comes from and why it matters
How AI models are fed: web scraping, licensed archives, user chats and synthetic data, plus why the source shapes what a model knows, repeats and gets wrong.
The short answer
- Almost everything a model knows comes from four taps: bulk copies of the public web, licensed archives, data users hand over, and synthetic text written by other models.
- The open web is the biggest tap by far, which is why models are strongest on popular English language topics and weakest on anything recent, paywalled or rarely written about.
- No major company publishes a full list of what went into a model, so treat any claim about a specific book, site or person being "in there" as unproven either way.
- Copyright cases over scraped text and images are live in several countries and the rules genuinely differ between the US and the EU, so there is no single answer yet.
- Training a model mostly on other models' output degrades it, a failure known as model collapse, which is why human written and licensed material is getting more valuable, not less.
A modern AI model is fed from four taps: a bulk copy of the public web, content licensed from publishers and archives, data that users hand over while using the product, and synthetic text written by other models. The proportions vary between companies and none of them publishes a full ingredient list, but the shape is consistent enough to reason about. This matters for one blunt reason: a model has no knowledge from anywhere else. Whatever is missing from the pile is missing from the answer, and whatever is over represented in the pile comes back at you more often than it should.
The four taps and what each one adds
| Source | What it actually is | What it adds | Where it falls short |
|---|---|---|---|
| Open web crawls | Automated copies of publicly reachable pages, plus code repositories and public forums | Scale and breadth, the bulk of the pile | Uneven quality, spam, stale pages, heavy English and forum skew |
| Licensed archives | Paid deals with news publishers, book and image libraries, stock agencies, academic databases | Edited, fact checked, long form prose | Expensive, narrow, and often limited to one publisher's back catalog |
| User submitted data | Your chats, uploaded files, thumbs up and thumbs down ratings, human written comparisons | Teaches tone, format and what people actually ask for | Privacy exposure, and it reflects the existing user base rather than everyone |
| Synthetic data | Text, images or worked examples generated by an existing model, then filtered | Cheap coverage of rare cases, such as step by step math or code | Inherits and amplifies the parent model's errors |
Training a large model consumes text measured in trillions of tokens, a token being the chunk of text models count instead of words. A few trillion tokens is the rough equivalent of tens of millions of books. No licensing budget on earth buys that much edited prose, which is why the open web does the heavy lifting and the other three taps are used to fix what the web is bad at.
What a web crawl actually scoops up
Crawlers work like a search engine's indexer: follow links, fetch pages, save the text, repeat. The largest public archive of this kind has been running for more than a decade and each snapshot covers on the order of a few billion pages. Anyone can download it, which is why it appears in so many training sets.
What arrives is raw. Before anything is trained on it, teams run a pipeline that typically:
- Strips navigation, ads, cookie banners and boilerplate, keeping the article text.
- Removes near duplicate pages, since the same wire story can appear on hundreds of sites.
- Drops pages that fail quality heuristics, such as very short pages, keyword stuffed spam or machine translated filler.
- Filters out known adult, violent and personal data heavy sources, imperfectly.
- Mixes in higher quality collections (code, reference works, licensed books) at a deliberately higher weight, so a well written page counts for more than a forum reply.
Two things follow from that pipeline. First, quantity is filtered down hard, often to a small fraction of what was collected. Second, the weighting decisions are editorial choices made by a handful of engineers, and they are one of the least visible reasons two models behave differently.
How the source shows up in the answer on your screen
The pile's shape becomes the model's personality.
English dominates. Roughly half the text in the big open crawls is English, and the highest quality curated collections lean further that way. That is why a model answers a question in fluent English, then gives a thinner, oddly formal answer to the same question in Portuguese or Tagalog, and why it costs more tokens to do so.
Forums are over represented. Public question and answer sites, hobby forums and code repositories are enormous, well structured and free to collect. So models are unusually good at the kind of problem people post publicly (a Python error, a router setting) and unusually confident in the register of a helpful stranger who is sometimes wrong.
Recent and paywalled material is thin. Anything behind a subscription, inside a PDF nobody linked to, or published after the training run ended is simply absent. That absence is the mechanism behind knowledge cutoffs, and it hits local news, court records and trade publications hardest.
Skew becomes bias. If a job title appears mostly beside one gender across millions of pages, the model reproduces that association unless it is trained against it. That is the plumbing behind bias in AI output, and it is a data problem before it is an algorithm problem.
The copyright question, described rather than predicted
Scraping copyrighted work to train a commercial model is being litigated in several countries at once, brought by authors, news publishers, music labels, image libraries and individual artists. The claims usually cover both the copying done to build the dataset and, separately, whether outputs reproduce protected expression.
The legal footing genuinely differs by region. In the US the central question is whether training counts as fair use, which is decided case by case on factors including how transformative the use is and what it does to the market for the original. In the EU there is a text and data mining exception that permits analysis of lawfully accessed content, but rights holders can reserve their rights in a machine readable way, and the EU AI Act separately requires providers of general purpose models to publish a sufficiently detailed summary of training content and to have a copyright policy. Those obligations are covered in what the AI Act asks of general purpose models. The UK and other jurisdictions have been working through their own versions of the same argument.
Practical translation for you: nobody can currently tell you with authority that a given model was trained lawfully, and anyone who states it flatly in either direction is guessing.
When models are fed their own output
Since AI generated text now makes up a growing share of new web pages, the next crawl inevitably contains model output. Train heavily on that and quality degrades in a specific way: rare words, unusual phrasings and minority viewpoints thin out first, the output drifts toward the average, and errors harden into facts. Researchers call this model collapse.
It is avoidable rather than inevitable. Careful use of synthetic data works well when the examples are verified, for instance math problems where the answer can be checked automatically. The danger is undirected scraping of a web that is quietly filling with unverified machine text. This is the commercial reason licensing deals and human written archives keep getting more expensive, and why provenance is now part of how models are trained.
What to check first
Start with your own footprint, then adjust how much you trust the output.
- Open the data controls in every AI account you use and look for a training toggle. Turn it off if you paste anything you would not post publicly. The steps per service are in how to stop your chats training AI.
- If you run a website, add rules for the named AI crawlers to your robots.txt, and use the EU style machine readable rights reservation if your audience is there.
- Before trusting an answer on a niche, local or recent topic, ask yourself whether the source material would plausibly exist in bulk on the open web. If not, verify it.
- Treat any statistic, quotation or legal citation as unverified until you see it on the original source.
The useful mental model is simple. A model is a compressed average of what it was shown, so ask what it was likely to have been shown before you ask whether it is right.
Common questions
Was my website used to train an AI model?
If your pages were publicly reachable before you blocked crawlers, assume they were collected at some point, because the large open crawls have been running for over a decade. You can block future collection with robots.txt rules naming the AI crawlers, but that does not remove anything already gathered. Some providers offer a form to request removal from future training sets.
Do my chats get used for training?
It depends on the product and your settings. Consumer free tiers often use conversations to improve models by default, while business and API tiers usually do not. Check the data controls in your account rather than assuming, because the default differs between providers and between the free and paid version of the same product.
Is scraping the web for training legal?
That is exactly what the courts are deciding, and the answer differs by country. In the US the argument turns on fair use. In the EU there is a text and data mining exception that rights holders can opt out of in a machine readable way. Nothing here is settled enough to call a rule.
Why does an AI know so much about some topics and nothing about mine?
Models learn from how often something is written about, not how important it is. A common programming error appears in millions of forum posts. Your local council's parking rules may appear once, on a PDF nobody linked to, so the model has no reliable picture of it and may invent one.