Where does this provider put your AI data — and who can compel its disclosure?
| Residency | Mainland China cn |
|---|---|
| Sovereignty | Mainland China cn |
| Endpoints | open.bigmodel.cn, api.z.ai |
| Packages | zhipuai (Python) |
| Regimes | PIPL |
| Cross-border references | PIPL cross-border transfer — Mainland China cross-border PI: CAC security assessment, standard contract, or certification (Provisions on Promoting and Regulating Cross-Border Data Flows, 2024). |
| KB note | api.z.ai is the international Zhipu endpoint; its cloud API is subject to Chinese law |
How does this provider treat the data you send it? Advisory statements about documented practices — not legal advice.
| Trains on customer API data by default | No source — User Agreement (effective 2025-05-20) section 三.9(1): uploaded data belongs to the user and '除执行您的服务要求外，不会进行任何未获授权的使用及披露' (no unauthorised use or disclosure beyond executing your service requests). Carve-out disclosed: Privacy Policy sections 二.7(4)/四.10 reserve anonymised derivatives for '机器学习或模型算法训练' (machine learning / model algorithm training) without further consent — identifiable content is not used; anonymised data may be. (retrieved 2026-08-22) |
|---|---|
| Retention (API inputs/outputs) | Personal information is stored within China only ('目前我们不会跨境传输或存储您的个人信息' — no cross-border transfer or storage at present), retained for the minimum period necessary for the stated purposes. On deletion, service expiry or termination a buffer period applies (per product docs), after which all data including cached and backup copies is deleted; deletion is irreversible. source — Section 五(一) storage location (China only, no cross-border transfer at present); section 五(二) retention for the minimum necessary period; User Agreement section 三.9(3): buffer-period storage after deletion/expiry, then all copies including caches and backups deleted (retrieved 2026-08-22) |
| Subprocessor list | https://docs.bigmodel.cn/cn/terms/privacy-policy.md — Section 三(一) shared third-party SDK/API table: Alipay face-verification and web payment APIs, WeChat Native Pay (Tenpay), Sensors Analytics (behaviour analytics), NetEase Qiyu (customer support), Aliyun SMS/mail push, Baidu Cloud SMS — each with the personal-info fields collected and purpose; covers the platform's account/payment/analytics surface (retrieved 2026-08-22) |
| Entry last reviewed | 2026-08-22 |