安全与合规
更新日期：2026 年 9 月 1 日
Security and compliance are the top priority of Zhidu's procurement services. This page explains our data protection mechanisms and compliance framework under the procurement service model. Core principle: Your model business connects directly to the official interfaces of model vendors, the data link does not pass through Zhidu, and we do not hold or relay any inference content. Note: This site is a product demonstration environment, and relevant qualification names are used to display the security capability framework.
Article 1. Direct Connection Architecture and Data Boundary
Direct official connection: The customer's business system connects directly to the official interface of the model vendor. Prompts, files, and model outputs are transmitted directly between the customer and the vendor, and Zhidu does not access inference content.
No relay credentials: Zhidu does not issue unified API keys to customers, nor does it provide relay gateways. Accounts and keys are created and managed by customers independently within the vendor's official system.
Minimized usage analysis: When assisting with usage monitoring, only official vendor bills or usage statistics authorized by the customer are used, and request bodies are not read.
Article 2. Procurement Service Data Protection
Transmission security: This site and form submissions are fully encrypted via HTTPS (TLS 1.2+) throughout the process.
Access control: Business and reconciliation information follows the principle of least privilege, with dedicated personnel for dedicated positions, and access behaviors are traced and auditable.
Model selection materials: Customers are advised to desensitize pressure test samples first. After the model selection report is delivered, it will be deleted in accordance with the agreed cycle, and will not be used for other customers or any training purposes.
Article 3. Compliance Framework
Vendor compliance: All models for which we assist in procurement are sourced from the official channels of mainstream domestic model vendors that have completed algorithm filing and security assessment.
Customer compliance support: We can assist in providing the index of compliance certification materials, security assessment reports and Data Processing Agreements (DPA) of each vendor, supporting compliance audits on the customer side.
Regulatory compliance: We comply with laws and regulations such as the Personal Information Protection Law, Data Security Law, and Interim Measures for the Administration of Generative Artificial Intelligence Services, and continuously follow up on regulatory requirements.
Article 4. Settlement and Business Security
Corporate account settlement: All expenses are collected and paid through corporate accounts. Contracts, reconciliation statements and special value-added tax invoices correspond one-to-one, and the process is auditable.
Floor price verification: Model procurement prices are subject to the official channel prices of vendors. Floor price basis can be provided for transaction-by-transaction verification, and private price markup is strictly prohibited.
7×24 support: Procurement and usage issues are responded to via exclusive service groups. For vendor-side failures, we assist in submitting tickets and following up on the processing progress.
Article 5. Security Reporting Channels
If you find security vulnerabilities on this site or receive suspicious security incidents, please report them via shangwu@woqingpr.com. We will respond within 24 hours and express our gratitude for valid reports.