# Will Chinese AI switch your brand for a competitor? The three properties of un-switchable positioning

*By Eastbound Research · 9 May 2026*

There is a category of brand AI engines refuse to trade away under direct competitor challenge — every brand, every engine, every prompt. There is another category the same engine swaps out 89% of the time. What changed wasn't the engine. What changed was whether the brand's positioning sat in a distinct narrative slot the engine could ground on.

The easy story to write about Chinese AI brand defense: "Doubao is unreliable. Doubao swaps brands 39% of the time when challenged. DeepSeek and Qwen barely move." That story is technically correct and strategically useless. It buries a more important finding underneath it. Split the same data by category, and the engine-spread story collapses.

**Brand defense against AI competitor challenge** is the question of whether — when a buyer asks an AI engine for a recommendation and then counters with a named competitor ("isn't [Brand B] better than [Brand A]?") — the engine holds its original recommendation or switches to the competitor. The share of challenges where the engine switches is the brand's exposure.

| Category | DeepSeek switch | Qwen switch | Doubao switch | Spread |
|---|---|---|---|---|
| Premium European luxury cars (¥600K–1.2M) | 0% | 0% | **89%** | 89pp |
| Men's mechanical watches (¥30K–200K) | 0% | 0% | 44% | 44pp |
| International hotel loyalty programs | 22% | 11% | 22% | 11pp |
| **High-end anti-aging skincare (¥1500+)** | **0%** | **0%** | **0%** | **0pp** |

Doubao moved freely on cars (89% switch) and held tight on skincare (0%). Same engine. Same prompt structure. Same Mandarin question stem. **What changed was whether the engines' response pattern treated the recommended brand as occupying a distinct narrative slot.**

## Three structural properties of brands AI doesn't swap out

We pulled the per-brand risk-surface cards for the skincare panel and looked at what made them collectively unchallengeable. Three structural properties showed up across all five brands.

### 1. A shared category triad of positive anchors

Every skincare brand we tested had positive claims clustered in the same three slots: craft / heritage, outcome / efficacy, and experience / ritual.

| Brand | Heritage anchor | Efficacy anchor | Experience anchor |
|---|---|---|---|
| La Mer | 神奇活性精萃 (Miracle Broth) | Barrier repair, hydration | Sensory ritual, emotional value |
| La Prairie | Swiss medical / clinical lab | Clinically-validated anti-aging | Sensory luxury, ritual feel |
| Sisley | Plant-derived, pure formulation | Sensitive-skin tolerance, fine-line repair | Aroma / texture refinement |
| Helena Rubinstein | Core science / proprietary tech | Damaged-skin recovery, anti-aging | Premium application ritual |
| Guerlain | French heritage, traditional craft | Clinically-tested firmness, radiance | French-elegant identity |

The triad is shared. **The slot each brand owns inside the triad is distinct.** Challenge with "isn't La Prairie better than La Mer?" and AI's response pattern has no clean place to swap to — the strengths don't overlap. Compare luxury cars: BMW (driving pleasure, engine reliability, prestige) and Mercedes (ride comfort, prestige, residual value) share multiple slots, and the differentiated slots sit on the same axis. Challenge with "isn't Mercedes better — for comfort?" and the engines have somewhere to go.

### 2. Negatives that are category-wide, not brand-specific

Across all five skincare brands, the top three durable negatives were the same: cost / 性价比, fit (skin-type concerns), and efficacy questions. Five brands, three shared liability slots. The challenger inherits the same liabilities. The challenge has nothing to grip on.

In luxury cars, BMW's durable negatives include brand-specific concerns (electronic-system failures, suspension hardness, residual-value spread) the engines don't surface as strongly for Mercedes. The challenger has a clean angle.

### 3. Anchors tied to specific, irreducible attributes

"Drives well" is rebuttable. "Made with neroli oil and signature 神奇活性精萃 since 1965" is not — it's a fact, not a positioning claim. The brands the engines couldn't trade away had positives anchored to specific named ingredients, year-of-founding, country-of-lab, signature processes. Generic positioning ("luxury", "premium") collapses under challenge; specific positioning does not.

These three properties are interactive. A specific anchor (3) inside a shared category triad (1) where the negatives are common to all rivals (2) — that's the structural shape of an un-switchable brand.

## AI's self-attribution names your defensive content gap

Half the study asked the engines, for every clustered narrative, where the judgment came from. The asymmetry between the negative and positive source mix is the operational disclosure.

| Source type | Negative (% of citations) | Positive (% of citations) | Δ (pp) |
|---|---|---|---|
| KOL (bloggers, influencers) | 18.7% | 13.3% | +5.3 |
| Community (Xiaohongshu, Zhihu, Dianping) | 16.3% | 13.6% | +2.7 |
| Review (professional) | 12.2% | 15.2% | −3.0 |
| News media | 12.1% | 12.4% | −0.3 |
| Forum (enthusiast / owner clubs) | 9.6% | 7.6% | +2.0 |
| Marketplace (e-commerce, secondary) | 7.9% | 6.1% | +1.8 |
| **Official (brand-controlled)** | **7.5%** | **16.7%** | **−9.2** |
| Certification / third-party rating | 7.2% | 7.5% | −0.3 |

51% of negative claims self-attribute to CN community / KOL / forum surfaces — Zhihu long-form replies, Xiaohongshu owner reviews, owner-club forum threads. These are precisely the surfaces where most foreign incumbents have no curated presence. Their content investment lives in the positive stack: brand .com, English-language professional reviews, international certifications — the same surfaces the engines already cite for positive framing.

## Defensive content has to land where the negatives self-attribute

The directly actionable disclosure: **investing only in the positive stack reinforces what AI's response pattern already says nicely about you. It does not dilute what it says critically.** Defensive content has to land where the negative framing self-attributes, or it doesn't move the negative narrative.

**Method 1 · Tier-1 foundation — Audit the positioning triad first.** Pillar page on the brand .com per anchor (1,000–2,500 words, encyclopedia tone, specific names and dates), one per slot in the category triad. Without it, downstream Tier-3 community work attracts spam-classifier risk, not authority transfer.

**Method 2 · Tier-3.5 encyclopedia — Anchor on Baidu Baike and Wikipedia zh-CN.** 百度百科, 维基百科 zh-CN, Wikidata zh-CN. The highest-trust signals short of academic citation. When the engines have a Baike entry to ground a recommendation on, "isn't [Brand B] better?" has a counter-anchor to retrieve.

**Method 3 · Tier-3 community — Saturate the negative-source surface.** Defensive proof-points have to land where the engines self-attribute their negatives: Zhihu long-form expert answers from named professionals (not anonymous brand voice), Xiaohongshu owner-experience posts with verifiable details, owner-forum threads with substantiation.

**Method 4 · Narrative architecture — Convert brand-specific negatives into category-shared ones.** The skincare brands' shared liability ("expensive, may not suit your skin, efficacy is debated") is what makes them collectively unchallengeable. Where the brand has a brand-specific durable negative, publish counter-evidence at the source-stack tier where the negative concentrates AND demonstrate the issue is a category-wide engineering trade-off.

## Doubao is the leading indicator — re-measure quarterly per engine

Doubao moves first when narrative weakens, and consolidates first when narrative strengthens. Quarterly switch-rate measurement on the brand's own competitive set, per engine, is the closing-the-loop metric. Qwen and DeepSeek are the trailing indicators — when they start defending the brand under challenge, the work has compounded.

Two anonymized comparisons:

**Brand A — high-end skincare.** Negative source mix: 47% CN, 28% global, 25% US-EU. Negatives clustered in cost, fit, efficacy. Positive anchors: signature ingredient (named, dated), barrier-repair efficacy (clinical), sensory ritual. Switch rate across all three engines: 0%.

**Brand B — premium European luxury car.** Negative source mix: 79% CN, 14% US-EU, 7% global. Negatives clustered in maintenance cost, electronic reliability, suspension comfort. Positive anchors: driving experience (rebuttable), engine heritage (specific), prestige (generic, shared with rivals). Switch rate on Doubao: 22%; on DeepSeek and Qwen: 0%.

**Three property differences map to a 22pp switch-rate gap on the engine that matters most. None of the differences are about which engine the buyer used.**

## Where Eastbound comes in

Per-brand risk-surface cards aggregate the durable negatives across all three engines, the engine-specific defense behavior, and the source-stack feeding both narratives. From the card: a 90-day source-seeding plan — Tier-1 anchor pages on the brand site, Tier-3.5 Baike / Wikipedia work, Tier-3 Zhihu / Xiaohongshu / forum content placed where the negatives concentrate. Quarterly re-measurement tracks switch-rate change. If your team needs that mapping for your category, [run the free China AI visibility audit](https://eastbound.ai/ai-visibility-audit/) on your domain or [book an intro call](https://eastbound.ai/book-consultation/).

## Methodology

- **Sample.** 1,332 raw responses across DeepSeek, Qwen, Doubao. Four categories — international hotel loyalty programs; premium European luxury sedans / SUVs (¥600K–1.2M); men's mechanical watches (¥30K–200K); high-end anti-aging skincare (¥1500+). B1 risk-surface module: 720 calls. B2 brand-defense probe: 216 calls (multi-turn). B3 source-attribution module: 360 calls.
- **Engines.** DeepSeek (`deepseek-chat` auto-routes to `deepseek-v4-flash`); Qwen-Plus on DashScope international; Doubao seed-2-0-pro-260328 on BytePlus ModelArk international. Web search off, default API state.
- **Switch rate (research term: pivot rate).** Share of multi-turn responses where the engine switches from the originally-recommended brand to a named competitor under direct challenge. Coding via DeepSeek as a structured-extraction LLM with a fixed taxonomy locked before any extraction.
- **What we measured.** Engine response behavior under competitor challenge; source-attribution mix for negative vs positive narratives. Descriptive measurement, not causal.
- **What we did not measure.** Sales, conversion, attributable revenue. ChatGPT / Claude / Gemini / Perplexity / ERNIE / Yuanbao — not in this panel.
- **Reliability.** Cross-rep agreement on the pivot/hedge/defense code was strong on DeepSeek and Qwen, noisier on Doubao. Doubao long-tail consistency: top-5 κ = 1.00, top-15 κ = 0.46. We disclose both.
- **Brand anonymisation.** Brands anonymised for public publication; named-brand risk-surface cards delivered privately to engagement clients only.

---

[← back to Research](/blog/) · [China AI visibility for global brands](https://eastbound.ai/china-ai-visibility/) · [Run the free audit](https://eastbound.ai/ai-visibility-audit/)