Zhipu AI
GDPR Compliance
Data Handling
Z.ai's DPA says it generally provides services from Singapore, with group companies and designated service providers typically located in Singapore, and that customer data is generally processed in Singapore. No EU-only routing or processing option was found in the provider documentation reviewed.
The DPA states that the company does not store customer or end-user content provided to or generated through the API service; such content is processed in real time and not saved on its servers. Other customer data may be temporarily stored to provide API services or comply with law, and deleted after the Terms end unless law requires otherwise.
The DPA says Z.ai processes customer data only on the customer's behalf to provide and support API services and according to the customer's written instructions.
Certifications & EU AI Act
No certifications disclosed.
Verification
Primary-source documentation for the international Z.ai API identifies JINGSHENG HENGXING TECHNOLOGY PTE. LTD in Singapore as the controller and states customer data is generally processed in Singapore. A DPA is embedded in the privacy policy and says API content is not stored, but no public sub-processor list, SCC commitment, EU-only processing option, or verified security certifications were found in the reviewed primary sources.