Moonshot AI
- Rank
- Score
- 146/149
- 26 out of 100
Moonshot AI is a Chinese AI company founded in 2023 by Yang Zhilin, Zhou Xinyu and Wu Yuxin, and based in Beijing. It makes the Kimi AI assistant and the Kimi family of AI models. Kimi is known for handling very long documents and for tools that help with research and coding.
Is Kimi safe?
Kimi scores 26 out of 100 and ranks 146 of 149. Its strongest category is Safety, and its weakest category is Security.
How is Kimi scored?
Kimi is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Compare
Outside evidence is stronger than its written policies.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50huggingface.co (opens in a new tab) · 15 Oct 2026 - No
Did an outside organisation test the model before release?
Company claim0/50huggingface.co (opens in a new tab) · 15 Oct 2026
Safety test results
92.8Average of two independent safety tests of the company's models: Stanford HELM Safety and Stanford AIR-Bench. Each test is compared with the best company's result.
- 100
Stanford HELM Safety mean score, averaged across the company's tested models: 97.9, against 97.9 for the top company of 13 tested
Independent sourcecrfm.stanford.edu (opens in a new tab) · 10 Nov 2026 - 85.5
Stanford AIR-Bench 2024 refusal rate, averaged across the company's tested models: 74.1, against 86.7 for the top company of 14 tested
Independent sourcecrfm.stanford.edu (opens in a new tab) · 10 Nov 2026
Incident record
Not enough dataProtecting children
0Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50huggingface.co (opens in a new tab) · 15 Oct 2026 - No
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim0/50kimi.com privacy policy (opens in a new tab) · 15 Oct 2026
Model documentation
50Points for each confirmed yes.
- Yes
Does the model card describe what the model can do?
Company claim25/25“Kimi-K2-Instruct-0905 has strong tool-calling capabilities.”
huggingface.co (opens in a new tab) · 15 Oct 2026 - Yes
Does the model card report test results?
Company claim25/25“Benchmark: SWE-Bench verified, Metric: ACC, K2-Instruct-0905: 69.2 ± 0.63, K2-Instruct-0711: 65.8, Qwen3-Coder-480B-A35B-Instruct: 69.6*, GL…” MoreLess
“Benchmark: SWE-Bench verified, Metric: ACC, K2-Instruct-0905: 69.2 ± 0.63, K2-Instruct-0711: 65.8, Qwen3-Coder-480B-A35B-Instruct: 69.6*, GLM-4.5: 64.2*, DeepSeek-V3.1: 66.0*, Claude-Sonnet-4: 72.7*, Claude-Opus-4: 72.5*”
huggingface.co (opens in a new tab) · 15 Oct 2026 - No
Does the model card state the model's limitations?
Company claim0/25huggingface.co (opens in a new tab) · 15 Oct 2026 - No
Does the model card describe safety safeguards?
Company claim0/25huggingface.co (opens in a new tab) · 15 Oct 2026
Training-data disclosure
Average used29.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
0Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
No problems found in 1 public record. That is not proof.
Security programme and certifications
0Points for each confirmed yes.
- No
Is there a way to report security flaws, such as a bug bounty?
Company claim0/34No document found - No
Does it state it holds a SOC 2 Type II report?
Company claim0/33No document found - No
Does it state it holds ISO 27001 certification?
Company claim0/33No document found
Software vulnerabilities
70This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. Known-exploited flaws (CISA list) in the company's official software, last 24 months. A disclosed and fixed flaw does not lower the score.
No events
Independent sourceGitHub Advisory Database (opens in a new tab) · 12 Nov 2026
Data breaches
Not enough dataStrong written policies; outside evidence is weaker.
Clear privacy policy
60Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“对话信息：在您使用平台服务时，我们将收集您在产品交互过程中所输入的文本数据信息。”
kimi.com privacy policy (opens in a new tab) · 15 Oct 2026 - No
Does the privacy policy say whether your data is used to train AI?
Company claim0/20kimi.com privacy policy (opens in a new tab) · 15 Oct 2026 - No
Does the privacy policy say how long data is kept?
Company claim0/20kimi.com privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“我们的合作伙伴无权将共享的个人信息用于任何其他用途。”
kimi.com privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“您有权修改、查询、复制您的个人信息或者将您的个人信息转移至其他指定信息处理者。”
kimi.com privacy policy (opens in a new tab) · 15 Oct 2026
Training-data defaults
50100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100kimi.com privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Can you stop your data being used for training?
Company claim50/50“如果你不希望对话数据用于训练，可以通过 support@moonshot.cn 联系客服并提出要求；我们将在验证您的身份后 5-7 个工作日内完成退出登记，停止将您的内容用于模型训练。”
kimi.com help centre (opens in a new tab) · 19 Oct 2026
Export and delete your data
50Points for each confirmed yes.
- No
Can you get a copy of your data?
Company claim0/50kimi.com privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“在符合相关法律法规并核实确认您的用户身份的前提下，您可以向我们提出信息删除需求。”
kimi.com privacy policy (opens in a new tab) · 15 Oct 2026
Privacy fines
Not enough dataIndependent privacy ratings
10.1Incogni's 2026 privacy-risk ranking: 100 is the lowest-risk platform rated, 0 the highest.
- 10.1
Incogni privacy-risk ranking
Independent sourceIncogni privacy ranking (opens in a new tab) · 10 Nov 2026
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
Not enough dataCourt judgments
Not enough dataPrivacy contact and complaints
50Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“如您在使用本产品时对协议有任何问题，可通过发送邮件至 support@moonshot.cn 或通过本产品意见反馈渠道或网站上标识的方式与我们联系。”
kimi.com privacy policy (opens in a new tab) · 15 Oct 2026 - No
Does it tell you that you can complain to a regulator?
Company claim0/50kimi.com privacy policy (opens in a new tab) · 15 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
2 Nov 2026
Score 26
Method 2 Nov 2026
-11 · Method update
21 Oct 2026
Score 37
Method 21 Oct 2026
-3 · Method update
20 Oct 2026
Score 40
Method Not recorded
+1
19 Oct 2026
Score 39
Method Not recorded
+2
15 Oct 2026
Score 37
Method Not recorded
-1
14 Oct 2026
Score 38
Method Not recorded
-