Moonshot AI (China)
GDPR Compliance
Data Handling
The platform privacy policy says personal information is stored in the People's Republic of China and they will not provide personal information outside China unless they obtain separate consent and comply with applicable Chinese laws. No EU region or EU-only processing option was found in the API platform documentation.
The privacy policy says personal information is stored in China and retained only for the time necessary to achieve service purposes unless law requires otherwise; when the product or service stops operating, they will anonymize or delete personal information within a reasonable period. The platform service agreement also states customer data is under the customer's control and Moonshot will process it only under the customer's instructions except where laws, the agreement/product rules, or technical support/troubleshooting require otherwise.
The API platform privacy policy states that conversation information entered during use helps them optimize the model and understand user needs and preferences. The platform service agreement separately says customer data is controlled by the customer and Moonshot, as a neutral technical service provider, will only process customer data under the customer's instructions except as otherwise required by law, the agreement/product rules, or for technical assistance.
Certifications & EU AI Act
No certifications disclosed.
Verification
Moonshot's Kimi API platform publishes a privacy policy and platform service agreement, but no public DPA/AVV, SCC commitment, subprocessors list, EU region, or certifications were found in primary sources reviewed on April 11, 2026. The strongest primary-source evidence indicates storage in China and privacy-policy language that conversation data may be used to optimize the model, while the service agreement separately frames customer data as processed under customer instructions.