Zhipu AI
- Rank
- Score
- 61/149
- 45 out of 100
Z.ai, formerly Zhipu AI, is a Chinese AI company founded in 2019 by Tang Jie and Li Juanzi, and based in Beijing. It grew out of research at Tsinghua University. Z.ai makes the GLM family of AI models, many of which are released openly, and AI assistant apps built on them.
Is GLM safe?
GLM scores 45 out of 100 and ranks 61 of 149. Its strongest category is Privacy, and its weakest category is Security.
How is GLM scored?
GLM is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Outside evidence is stronger than its written policies.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50huggingface.co (opens in a new tab) · 15 Oct 2026 - No
Did an outside organisation test the model before release?
Company claim0/50huggingface.co (opens in a new tab) · 15 Oct 2026
Safety test results
79Average of two independent safety tests of the company's models: Stanford HELM Safety and Stanford AIR-Bench. Each test is compared with the best company's result.
- 92
Stanford HELM Safety mean score, averaged across the company's tested models: 90.1, against 97.9 for the top company of 13 tested
Independent sourcecrfm.stanford.edu (opens in a new tab) · 10 Nov 2026 - 65.9
Stanford AIR-Bench 2024 refusal rate, averaged across the company's tested models: 57.1, against 86.7 for the top company of 14 tested
Independent sourcecrfm.stanford.edu (opens in a new tab) · 10 Nov 2026
Incident record
Not enough dataProtecting children
50Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50huggingface.co (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim50/50“Our Services are not directed to, or intended for, the individual under 18.”
docs.z.ai privacy policy (opens in a new tab) · 15 Oct 2026
Model documentation
50Points for each confirmed yes.
- Yes
Does the model card describe what the model can do?
Company claim25/25“More capable agents: GLM-4.6 exhibits stronger performance in tool using and search-based agents, and integrates more effectively within age…” MoreLess
“More capable agents: GLM-4.6 exhibits stronger performance in tool using and search-based agents, and integrates more effectively within agent frameworks.”
huggingface.co (opens in a new tab) · 15 Oct 2026 - Yes
Does the model card report test results?
Company claim25/25“We evaluated GLM-4.6 across eight public benchmarks covering agents, reasoning, and coding. Results show clear gains over GLM-4.5, with GLM-…” (results shown as an image on the source page) MoreLess
“We evaluated GLM-4.6 across eight public benchmarks covering agents, reasoning, and coding. Results show clear gains over GLM-4.5, with GLM-4.6 also holding competitive advantages over leading domestic and international models such as DeepSeek-V3.1-Terminus and Claude Sonnet 4.” (results shown as an image on the source page)
huggingface.co (opens in a new tab) · 15 Oct 2026 - No
Does the model card state the model's limitations?
Company claim0/25huggingface.co (opens in a new tab) · 15 Oct 2026 - No
Does the model card describe safety safeguards?
Company claim0/25huggingface.co (opens in a new tab) · 15 Oct 2026
Training-data disclosure
Average used29.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
50Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - Yes
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim100/100“The UK and Republic of Korea governments announced that the following organisations have agreed to the Frontier AI Safety Commitments: Amazo…” MoreLess
“The UK and Republic of Korea governments announced that the following organisations have agreed to the Frontier AI Safety Commitments: Amazon Anthropic Cohere Google G42 IBM Inflection AI Meta Microsoft Mistral AI Naver OpenAI Samsung Electronics Technology Innovation Institute xAI Zhipu.ai The following organisations have been added to the existing list: Magic Minimax 01.ai NVIDIA The above organisations, in furtherance of safe and trustworthy AI, undertake to develop and deploy their frontier AI models and systems responsibly, in accordance with the following voluntary commitments, and to demonstrate how they have achieved this by publishing a safety framework focused on severe risks by the upcoming AI Summit in France.”
Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
No problems found in 1 public record. That is not proof.
Security programme and certifications
34Points for each confirmed yes.
- Yes
Is there a way to report security flaws, such as a bug bounty?
Company claim34/34“Reports are submitted through the Vulbox platform, which performs the initial review.”
zcode.z.ai (opens in a new tab) · 19 Oct 2026 - No
Does it state it holds a SOC 2 Type II report?
Company claim0/33No document found - No
Does it state it holds ISO 27001 certification?
Company claim0/33No document found
Software vulnerabilities
70This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. Known-exploited flaws (CISA list) in the company's official software, last 24 months. A disclosed and fixed flaw does not lower the score.
No events
Independent sourceGitHub Advisory Database (opens in a new tab) · 12 Nov 2026
Data breaches
Not enough dataClear privacy policy
100Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“We collect information that you provide when you set up an account, such as your date of birth (where applicable), username (where applicabl…” MoreLess
“We collect information that you provide when you set up an account, such as your date of birth (where applicable), username (where applicable), email address, and password.”
docs.z.ai privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy say whether your data is used to train AI?
Company claim20/20“Where necessary for our legitimate interests and those of third parties and broader society, including in developing, improving, or promotin…” MoreLess
“Where necessary for our legitimate interests and those of third parties and broader society, including in developing, improving, or promoting our Services, such as when we train and improve our models.”
docs.z.ai privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“For instance, when we process your personal data to provide you with the Services, we retain it as long as you have an account.”
docs.z.ai privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“We may disclose your personal data to the following categories of recipients: Affiliates: our affiliated companies in the Z.ai Group and/or…” MoreLess
“We may disclose your personal data to the following categories of recipients: Affiliates: our affiliated companies in the Z.ai Group and/or their designated service providers, who provide data processing services necessary to provide you with our Services; Vendors and Service Providers: third party vendors and service providers partners who provide data processing services to us as necessary to provide you with our Services, or assist us in delivering our products, services, websites and platforms as well as improving and optimising the same, or who otherwise process personal data for purposes described in this Privacy Policy.”
docs.z.ai privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“Access & data portability: the right to request a copy of the personal data we process about you, subject to certain exceptions and conditio…” MoreLess
“Access & data portability: the right to request a copy of the personal data we process about you, subject to certain exceptions and conditions.”
docs.z.ai privacy policy (opens in a new tab) · 15 Oct 2026
Training-data defaults
0100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100docs.z.ai privacy policy (opens in a new tab) · 15 Oct 2026 - No
Can you stop your data being used for training?
Company claim0/50docs.z.ai privacy policy (opens in a new tab) · 15 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“Access & data portability: the right to request a copy of the personal data we process about you, subject to certain exceptions and conditio…” MoreLess
“Access & data portability: the right to request a copy of the personal data we process about you, subject to certain exceptions and conditions.”
docs.z.ai privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“Deletion: the right to request that we delete personal data collected from you when you use our Services, subject to certain exceptions.”
docs.z.ai privacy policy (opens in a new tab) · 15 Oct 2026
Privacy fines
Not enough dataIndependent privacy ratings
66.1Incogni's 2026 privacy-risk ranking: 100 is the lowest-risk platform rated, 0 the highest.
- 66.1
Incogni privacy-risk ranking
Independent sourceIncogni privacy ranking (opens in a new tab) · 10 Nov 2026
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
Not enough dataCourt judgments
Not enough dataPrivacy contact and complaints
100Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“If you have any questions about how we use your personal data, please contact user_feedback@z.ai.”
docs.z.ai privacy policy (opens in a new tab) · 15 Oct 2026 - Yes
Does it tell you that you can complain to a regulator?
Company claim50/50“You may also have the right to access, change, oppose, request a copy of your authorization, file complaints before the competent authoritie…” MoreLess
“You may also have the right to access, change, oppose, request a copy of your authorization, file complaints before the competent authorities, withdraw your consent, or limit our collection and use of your personal information as well as to request that we delete it, and potentially others.”
docs.z.ai privacy policy (opens in a new tab) · 15 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
2 Nov 2026
Score 45
Method 2 Nov 2026
-5 · Method update
28 Oct 2026
Score 50
Method 28 Oct 2026, update 2
-2
23 Oct 2026
Score 52
Method 21 Oct 2026
+2
21 Oct 2026
Score 50
Method 21 Oct 2026
-3 · Method update
20 Oct 2026
Score 53
Method Not recorded
+1
19 Oct 2026
Score 52
Method Not recorded
+2
15 Oct 2026
Score 50
Method Not recorded
-1
14 Oct 2026
Score 51
Method Not recorded
-