{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9b7f2a48-61e6-529f-ad94-11475cac9415",
  "version": 1,
  "metadata": {
    "timestamp": "2026-11-04T00:00:00Z"
  },
  "components": [
    {
      "type": "machine-learning-model",
      "bom-ref": "https://jesseahawkins.com/vendors/alibaba/aibom/component",
      "name": "Alibaba Cloud: Alibaba Cloud Model Studio, international site",
      "properties": [
        {
          "name": "com.jesseahawkins:fact:certifications",
          "value": "SOC 2"
        },
        {
          "name": "com.jesseahawkins:evidence:certifications",
          "value": "snapshot:sha256:60573ba1ba19bb4030c3193263005b8b7a2b9f4b34fd1809558a72657f02a2c0"
        },
        {
          "name": "com.jesseahawkins:recorded-at:certifications",
          "value": "2026-10-26T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:certifications",
          "value": "2026-10-26"
        },
        {
          "name": "com.jesseahawkins:fact:customer_data_retention_period",
          "value": "Up to 30 days, with listed exceptions"
        },
        {
          "name": "com.jesseahawkins:evidence:customer_data_retention_period",
          "value": "snapshot:sha256:8e88f476d5c7da5daea273aec57b4e8ae7093540d8d4f75800fcb07a12feb28b"
        },
        {
          "name": "com.jesseahawkins:recorded-at:customer_data_retention_period",
          "value": "2026-10-26T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:customer_data_retention_period",
          "value": "2026-10-26"
        },
        {
          "name": "com.jesseahawkins:responsive-to:customer_data_retention_period",
          "value": "iso-42001@2023:A.7.3 nist-ai-rmf@1.0:MEASURE-2.10"
        },
        {
          "name": "com.jesseahawkins:fact:trains_on_customer_data",
          "value": "No"
        },
        {
          "name": "com.jesseahawkins:evidence:trains_on_customer_data",
          "value": "snapshot:sha256:60573ba1ba19bb4030c3193263005b8b7a2b9f4b34fd1809558a72657f02a2c0"
        },
        {
          "name": "com.jesseahawkins:recorded-at:trains_on_customer_data",
          "value": "2026-10-26T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:trains_on_customer_data",
          "value": "2026-10-26"
        },
        {
          "name": "com.jesseahawkins:responsive-to:trains_on_customer_data",
          "value": "eu-ai-act@2026-07-27:annex-iv/2/d eu-ai-act@2026-07-27:annex-xi/s1/2/c iso-42001@2023:A.7.3 iso-42001@2023:A.7.5 nist-ai-rmf@1.0:MEASURE-2.10"
        },
        {
          "name": "com.jesseahawkins:fact:usage_limits",
          "value": "Requests and tokens per minute per model, at account level"
        },
        {
          "name": "com.jesseahawkins:evidence:usage_limits",
          "value": "snapshot:sha256:4a945caac0cbe6a0bc87060a1b34125db2897f63b2a6f3e9199b62b45c8b7745"
        },
        {
          "name": "com.jesseahawkins:recorded-at:usage_limits",
          "value": "2026-11-03T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:usage_limits",
          "value": "2026-11-03"
        },
        {
          "name": "com.jesseahawkins:fact:zero_data_retention",
          "value": "Zero Data Retention, for enterprise customers on assessment"
        },
        {
          "name": "com.jesseahawkins:evidence:zero_data_retention",
          "value": "snapshot:sha256:8e88f476d5c7da5daea273aec57b4e8ae7093540d8d4f75800fcb07a12feb28b"
        },
        {
          "name": "com.jesseahawkins:recorded-at:zero_data_retention",
          "value": "2026-10-26T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:zero_data_retention",
          "value": "2026-10-26"
        },
        {
          "name": "com.jesseahawkins:withheld:ai_subprocessors",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:withheld:data_residency",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:withheld:dpa",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:quote:certifications",
          "value": "Alibaba Cloud Model Studio has achieved SOC 2 compliance with an unqualified opinion, validating our rigorous controls for Security, Availability, and Confidentiality."
        },
        {
          "name": "com.jesseahawkins:source:certifications",
          "value": "https://www.alibabacloud.com/help/en/model-studio/privacy-notice"
        },
        {
          "name": "com.jesseahawkins:quote:customer_data_retention_period",
          "value": "By default, user’s prompts and responses from model inference calls are retained for no longer than 30 days, unless longer retention is required by applicable laws or is reasonably necessary to ensure the security of Alibaba Cloud Model Studio services."
        },
        {
          "name": "com.jesseahawkins:source:customer_data_retention_period",
          "value": "https://www.alibabacloud.com/help/en/model-studio/data-retention-policy"
        },
        {
          "name": "com.jesseahawkins:quote:trains_on_customer_data",
          "value": "Alibaba Cloud strictly protects your data privacy and will never use your data for model training."
        },
        {
          "name": "com.jesseahawkins:source:trains_on_customer_data",
          "value": "https://www.alibabacloud.com/help/en/model-studio/privacy-notice"
        },
        {
          "name": "com.jesseahawkins:quote:usage_limits",
          "value": "Alibaba Cloud Model Studio applies rate limiting to model calls at the Alibaba Cloud account level, aggregating usage across all RAM users, workspaces, and API keys under the account."
        },
        {
          "name": "com.jesseahawkins:source:usage_limits",
          "value": "https://www.alibabacloud.com/help/en/model-studio/rate-limit"
        },
        {
          "name": "com.jesseahawkins:quote:zero_data_retention",
          "value": "ZDR is available to enterprise customers with an Alibaba Cloud account manager, subject to a needs assessment."
        },
        {
          "name": "com.jesseahawkins:source:zero_data_retention",
          "value": "https://www.alibabacloud.com/help/en/model-studio/data-retention-policy"
        }
      ]
    }
  ],
  "properties": [
    {
      "name": "com.jesseahawkins:vendor",
      "value": "alibaba"
    },
    {
      "name": "com.jesseahawkins:record",
      "value": "https://jesseahawkins.com/vendors/alibaba/"
    },
    {
      "name": "com.jesseahawkins:notice",
      "value": "This record is a factual recitation of publicly available vendor documentation as of the verification date. It does not constitute a legal opinion, a regulatory compliance certification, or an allegation of wrongdoing. The kept pages are held strictly as an evidentiary record that supports these findings."
    },
    {
      "name": "com.jesseahawkins:signed",
      "value": "false"
    },
    {
      "name": "com.jesseahawkins:signature-note",
      "value": "The AIBOM files of this record are not signed. A signature waits on a signing key held in a key management service. Until then, check each quote against the kept page and its sha256."
    }
  ]
}