Terms of Service

Z.ai · Official agreement

Read the agreement

11 of 109 cards in Security & Safeguards

Security & Safeguards · Restriction or exception

No attacks on networks or assistance with them

You must not endanger Z.ai’s networks or systems. This includes unauthorized access, disruption, theft and spreading malware, and also technical support, advertising, payment processing or other assistance for activities endangering network security.

Supporting quotations

You should not engage in any activities that endanger the network and system security of Z.ai during your use of the Services, including but not limited to:
a. Unauthorized access to networks, interference with normal network functions, data theft, intentional dissemination of malicious programs or viruses, or any other activities that endanger network security and order are strictly prohibited.
c. Providing technical support, advertising, payment processing, or any other assistance to facilitate activities that endanger network security is prohibited.

Security & Safeguards · Restriction or exception

Automation cannot obtain unauthorized data or access

The terms prohibit deep linking, scraping, bots, spiders or other automated access to Z.ai or third-party services through it for accessing, obtaining or monitoring unauthorized data, content, servers or accounts. This clause ties its automation restriction to that unauthorized purpose.

Supporting quotations

b. The use of deep linking, page scraping, social bots, spiders, or other automated means to access this service or third-party services through this service, for the purpose of accessing, obtaining, or monitoring any unauthorized data, content, or servers/accounts, is strictly forbidden.

Security & Safeguards · Restriction or exception

No reverse engineering or bypassing safeguards

You may not reverse engineer, decompile or disassemble Z.ai or try to extract data from its algorithms, source code, mechanisms or related components. You also may not bypass its safeguards against prohibited actions or distribute methods for doing so.

Supporting quotations

d. Reverse engineering, decompiling, disassembling, or attempting to extract data from Z.ai algorithms, source code, mechanisms, or any related components is strictly prohibited.
e. You may not bypass, circumvent, or disseminate methods or techniques designed to bypass or circumvent the security measures implemented by Z.ai to prevent actions prohibited under these Terms.

Security & Safeguards · Restriction or exception

Report vulnerabilities privately rather than publish them

Z.ai encourages reporting service defects or vulnerabilities through its feedback interface or designated contacts. It prohibits publicly disclosing, distributing or publishing them online or through other channels.

Supporting quotations

If you discover any vulnerabilities or defects in the services provided by Z.ai, you are encouraged to report them through the feedback feature available within the interface or through the designated contact methods specified in these Terms. You must not publicly disclose, distribute, or publish any vulnerabilities or defects through the internet or other channels.

Security & Safeguards · Restriction or exception

API rules prohibit interference and malicious code

For API users and end users, the appendix prohibits interference with platform components, modules or data, personally or through third-party software. It literally says “direct or authorized interference.” It also bans generating malicious code and other unauthorized uses potentially harmful to Z.ai’s interests.

Supporting quotations

f. You and End Users must not engage in any of the following improper uses of the Z.ai during your use of our API Services, including but not limited to:
xi. Any direct or authorized interference with the Z.ai, including its components, modules, or data, whether conducted personally or through third-party software;
xiii. Any generation of malicious code by using the Z.ai or its internal models;
xiv. Any other unauthorized actions or usage potentially detrimental to our interests.

Security & Safeguards · Restriction or exception

API operators must manage end-user content compliance

API users are responsible for all End User Content and warrant the rights, licenses and permissions needed for inputs. They must manage content accuracy, safety, legality and compliance with mechanisms including review, user management, data security, monitoring, early warnings and emergency response.

Supporting quotations

c. You are responsible for all End User Content. You warrant that the Input has all rights, licenses and permission required to provide Input to the Services. You are responsible for managing the accuracy, safety, legality, and compliance of End User Content, establishing mechanisms including but not limited to content review, user management, data security, monitoring and early warning, and emergency response.

Security & Safeguards · Restriction or exception

Keep any created keys secret

If you create keys, you must secure them, avoid sharing or publishing them and keep them out of browser or other client-side code. The terms put fees and losses from sharing or leaking keys on you.

Supporting quotations

Please keep your created key(s) securely, prevent any form of leakage, do not share or publicly disclose your key(s) with others, and do not expose your key(s) in browser or other client-side code. You will be solely responsible for any fees incurred and losses caused by sharing or leaking your key(s).

Security & Safeguards · Restriction or exception

No threats to critical infrastructure or national interests

The prohibited uses include compromising or threatening critical infrastructure or national security and harming any country or jurisdiction’s national interests.

Supporting quotations

a. Using the Services in any way that compromises or threatens critical infrastructure or national security.
b. Harming national interests of any country or jurisdiction.

Security & Safeguards · Restriction or exception

Continuity, security and content preservation are not guaranteed

To the fullest extent permitted by law, Z.ai disclaims guarantees of uninterrupted, accurate, error-free or secure service and that content will remain intact, unchanged or free from loss.

Supporting quotations

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW:
WE DO NOT GUARANTEE THAT THE SERVICES WILL BE UNINTERRUPTED, ACCURATE, ERROR-FREE, OR SECURE, NOR DO WE WARRANT THAT ANY CONTENT WILL REMAIN INTACT, UNALTERED, OR FREE FROM LOSS; AND

Security & Safeguards · Restriction or exception

API operators must secure systems and manage content and disclosures

API operators must implement legally required organizational and technical controls, including user management, data security, monitoring, warnings and emergency response. They must accurately disclose model use under regulatory requirements and promptly remove, block, withdraw or otherwise handle illegal or harmful returned information discovered or reported. These are appendix duties for API use.

Supporting quotations

c. You shall establish organizational and technical measures in accordance with the requirements provided under applicable laws and regulations, including but not limited to user management, data security, monitoring, warning, and emergency disposal, to ensure the integrity, confidentiality, and availability of your systems, networks, information, and data, preventing risks such as data security, public opinion, or misuse and abuse of products or services.
d. You must truthfully and accurately disclose the use of models from the Z.ai (and other models, if applicable) in accordance with relevant regulations and supervisory requirements. You may not make false or misleading disclosures, labels or displays regarding products and services that are not making use of models from the Z.ai
e. Given that API-returned information may not be flawless, you shall promptly take deletion, blocking, withdrawal and other disposal measures in accordance with the law for illegal and harmful information discovered or notified, to ensure lawful and compliant operation of applications.

Security & Safeguards · Restriction or exception

API use prohibits unauthorized modifications and access tools

Except for expressly authorized functionality, the API rules prohibit unauthorized copying, modification, interception or derivatives of the platform and specified cached, interaction and system data. They also prohibit tampering with instructions or operational data to change functionality, distributing methods for doing so regardless of commercial intent, and unauthorized third-party access software or developing and distributing those tools.

Supporting quotations

f. You and End Users must not engage in any of the following improper uses of the Z.ai during your use of our API Services, including but not limited to:
viii. Except for specific functionalities expressly authorized by us, any unauthorized reproduction, modification, augmentation, deletion, interception, or creation of derivative works from: (i) the Z.ai; (ii) data cached in terminal memory during platform operation; (iii) client-server interaction data during software execution; or (iv) essential system operation data, including but not limited to access through unauthorized plugins, extensions, or third-party tools/services;
ix. Any tampering with or falsification of software instructions or operational data to modify, enhance, reduce, or otherwise alter platform functionality or performance characteristics, or the commercialization or public dissemination of software/methods designed for such purposes, regardless of commercial intent;
x. Any access to or use of our software and services through unauthorized third-party software, plugins, add-ons, or systems, or any development/publication/distribution of such tools;