Backfrom Z.AI’s own policies · verified 2026-09-02 · some facts not published
Z.AI: data residency & retention
Headquarters
🇨🇳 China (China)
Where inference runs
Other
The international platform (api.z.ai, Singapore entity) states personal data is generally processed in Singapore, but permitted transfers to unnamed group affiliates mean handling by the Beijing parent is not excluded.
Region pinning
No
Single global endpoint with no region parameter; the only split is the international platform vs. open.bigmodel.cn (mainland China).
Prompt retention
Not retained
The API DPA states customer content is processed in real time and not saved on Z.ai's servers — but no retention table, abuse-review exception, or third-party audit backs the claim.
Trains on API data
No
For API users, content is not used to develop or improve services unless explicitly agreed (opt-in); individual consumer users ARE trained on by default.
Zero data retention
Available
No-content-storage is the stated default for the API per the DPA rather than an optional tier, but it is uncertified and unverified.
Compiled from Z.AI’s published privacy policy, terms, and documentation on 2026-09-02. “Not disclosed” means Z.AI publishes nothing on the point. Policies change without notice, so verify against the sources above before relying on this for compliance decisions.