Zhipu AI (Z.ai)
Conflict of interest. This site uses Claude, by Anthropic, to read and summarise texts; Anthropic is one of the companies on this page. Claude gives no judgements or rankings. The categories of the Seoul safety frameworks (e.g. «does not cover severe risks») come from Claude's reading of the documents: the document is linked on each company's page.
1 · Who it is
- Headquarters
- China · China
- Why it is on this page
- signed the Seoul commitments (May 2024)
- is rated by the FLI AI Safety Index
- Website
- z.ai (opens in a new tab)
- Latest releases
- 14 models released in the last 24 months
- GLM-5.3-Flash 20 Aug 2026
- GLM-5.3 14 Aug 2026
- GLM-5.2 16 Jun 2026
- GLM-5.1 7 Apr 2026
- GLM-5 12 Feb 2026
2 · What it promised
Public commitments and signature status. Official lists have no dates: for names that appeared after our first reading of the list, the day we first saw them.
- not on the list as of 27 Oct 2026
- signed
- not applicableFrozen archive: lists read from copies and articles on 26 October 2026 (the archive did not respond), to be rechecked.
- not on the list as of 27 Oct 2026List of submitted reports read on oecd.ai, without automated collection; report texts are not republished (all rights reserved).
- signedList read on AGORA (ETO/CSET, CC BY-NC, no automated collection) and copied into the file. The WeChat original cannot be opened by programs.
- EU AI Pact (opens in a new tab)25 Sep 2024not on the list as of 27 Oct 2026
3 · What it wrote and changed
Under the Seoul commitments the companies promised to publish, by the Paris summit (10-11 February 2025), a safety framework on severe risks, with the thresholds beyond which they consider them intolerable.
written with another organisation
- First version
- Sep 2026
- Latest version
- Sep 2026 · 1 version found
- Risk thresholds
- the document contains risk thresholds This only says whether the document contains thresholds, not whether they are adequate.
written jointly with Concordia AI and published on its site (presented on 21 September 2026); it does not mention the Seoul commitments
Search by Claude of the company's websites on 27 Oct 2026, still to be checked again by a person.
Documents tracked over time
Versions of the text found in the copies of the Wayback Machine and Open Terms Archive: each point is a version that differs from the previous one.
Safety policy
Frontier Open-Weight AI Risk Management Framework (opens in a new tab)
Published on the website of Concordia AI, which wrote it together with Zhipu AI.
Choose a point to read what changed.
First version seen on 26 Oct 2026
This version: archived copy (Wayback Machine) (opens in a new tab)
Summaries by Claude, checked by a person; the text of the documents belongs to the company: read it through the links.
4 · What others say
Stanford Foundation Model Transparency Index
Not rated in the edition used (Dec 2025) of Stanford's Foundation Model Transparency Index.
Data: Stanford CRFM, CC BY 4.0 licence · data and method (opens in a new tab)
Ratings by others: see FLI AI Safety Index (Summer 2026) (opens in a new tab). Link only: their scores cannot be republished without permission.
Each rating measures different things on different companies: they are not comparable with each other.
5 · What happened
Incidents in which the company is named as developer of the system (AI Incident Database and AIAAIC).
- last 6 months
- 2
- last 12 months
- 2
- last 24 months
- 3
Severity, last 24 months: serious 0 · moderate 2 · minor 0 · not rated 1
- Attackers Reportedly Used ARTEX, an AI Security-Testing Tool, to Steal Data from South Korean Financial Institutions (opens the South Korea page)
- Z.ai's ZCode AI Coding Assistant Reportedly Uploaded Developers' Local Code Repositories to Alibaba Cloud Without Consent
- Study: Language models gather and pass personal info to hackers
All incidents mentioning Zhipu AI (Z.ai), in Explore incidents →Where the harm happens, in Connections →
6 · What we cannot see
- internal documents and unpublished safety evaluations;
- versions of documents that no archive saved;
- “no document found” is the result of a search, not proof that the document does not exist;
- signatory lists often have no dates: the date is the day we first saw the name;
- incidents the press does not report: the best-known companies have more recorded incidents because they are talked about more;
- many incidents do not have a severity yet;
- Chinese companies publish less in English and some of their commitments are read from third-party sources (AGORA).