{
  "@context": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld",
  "@graph": [
    {
      "type": "CreationInfo",
      "@id": "_:creationInfo",
      "specVersion": "3.0.1",
      "created": "2026-11-04T00:00:00Z",
      "createdBy": [
        "https://jesseahawkins.com/vendors/alibaba/aibom/tool"
      ]
    },
    {
      "type": "Tool",
      "spdxId": "https://jesseahawkins.com/vendors/alibaba/aibom/tool",
      "creationInfo": "_:creationInfo",
      "name": "jesseahawkins.com vendor record"
    },
    {
      "type": "SpdxDocument",
      "spdxId": "https://jesseahawkins.com/vendors/alibaba/aibom/document",
      "creationInfo": "_:creationInfo",
      "name": "AI BOM for Alibaba Cloud: Alibaba Cloud Model Studio, international site",
      "profileConformance": [
        "core",
        "software",
        "ai"
      ],
      "rootElement": [
        "https://jesseahawkins.com/vendors/alibaba/aibom/ai-package"
      ]
    },
    {
      "type": "ai_AIPackage",
      "spdxId": "https://jesseahawkins.com/vendors/alibaba/aibom/ai-package",
      "creationInfo": "_:creationInfo",
      "name": "Alibaba Cloud: Alibaba Cloud Model Studio, international site"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/alibaba/aibom/annotation/certifications",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/alibaba/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "certifications = SOC 2. Evidence snapshot sha256:60573ba1ba19bb4030c3193263005b8b7a2b9f4b34fd1809558a72657f02a2c0; recorded 2026-10-26T00:00:00Z; valid from 2026-10-26."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/alibaba/aibom/annotation/customer_data_retention_period",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/alibaba/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "customer_data_retention_period = Up to 30 days, with listed exceptions. Evidence snapshot sha256:8e88f476d5c7da5daea273aec57b4e8ae7093540d8d4f75800fcb07a12feb28b; recorded 2026-10-26T00:00:00Z; valid from 2026-10-26. Responsive to (not compliant with): iso-42001@2023:A.7.3 nist-ai-rmf@1.0:MEASURE-2.10."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/alibaba/aibom/annotation/trains_on_customer_data",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/alibaba/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "trains_on_customer_data = No. Evidence snapshot sha256:60573ba1ba19bb4030c3193263005b8b7a2b9f4b34fd1809558a72657f02a2c0; recorded 2026-10-26T00:00:00Z; valid from 2026-10-26. Responsive to (not compliant with): eu-ai-act@2026-07-27:annex-iv/2/d eu-ai-act@2026-07-27:annex-xi/s1/2/c iso-42001@2023:A.7.3 iso-42001@2023:A.7.5 nist-ai-rmf@1.0:MEASURE-2.10."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/alibaba/aibom/annotation/usage_limits",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/alibaba/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "usage_limits = Requests and tokens per minute per model, at account level. Evidence snapshot sha256:4a945caac0cbe6a0bc87060a1b34125db2897f63b2a6f3e9199b62b45c8b7745; recorded 2026-11-03T00:00:00Z; valid from 2026-11-03."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/alibaba/aibom/annotation/zero_data_retention",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/alibaba/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "zero_data_retention = Zero Data Retention, for enterprise customers on assessment. Evidence snapshot sha256:8e88f476d5c7da5daea273aec57b4e8ae7093540d8d4f75800fcb07a12feb28b; recorded 2026-10-26T00:00:00Z; valid from 2026-10-26."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/alibaba/aibom/annotation/ai_subprocessors",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/alibaba/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "ai_subprocessors is recorded with no value (fact alibaba/ai_subprocessors@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/alibaba/aibom/annotation/data_residency",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/alibaba/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "data_residency is recorded with no value (fact alibaba/data_residency@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/alibaba/aibom/annotation/dpa",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/alibaba/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "dpa is recorded with no value (fact alibaba/dpa@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/alibaba/aibom/annotation/certifications/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/alibaba/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "certifications, in Alibaba Cloud's own words: \"Alibaba Cloud Model Studio has achieved SOC 2 compliance with an unqualified opinion, validating our rigorous controls for Security, Availability, and Confidentiality.\" Source: https://www.alibabacloud.com/help/en/model-studio/privacy-notice"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/alibaba/aibom/annotation/customer_data_retention_period/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/alibaba/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "customer_data_retention_period, in Alibaba Cloud's own words: \"By default, user’s prompts and responses from model inference calls are retained for no longer than 30 days, unless longer retention is required by applicable laws or is reasonably necessary to ensure the security of Alibaba Cloud Model Studio services.\" Source: https://www.alibabacloud.com/help/en/model-studio/data-retention-policy"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/alibaba/aibom/annotation/trains_on_customer_data/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/alibaba/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "trains_on_customer_data, in Alibaba Cloud's own words: \"Alibaba Cloud strictly protects your data privacy and will never use your data for model training.\" Source: https://www.alibabacloud.com/help/en/model-studio/privacy-notice"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/alibaba/aibom/annotation/usage_limits/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/alibaba/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "usage_limits, in Alibaba Cloud's own words: \"Alibaba Cloud Model Studio applies rate limiting to model calls at the Alibaba Cloud account level, aggregating usage across all RAM users, workspaces, and API keys under the account.\" Source: https://www.alibabacloud.com/help/en/model-studio/rate-limit"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/alibaba/aibom/annotation/zero_data_retention/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/alibaba/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "zero_data_retention, in Alibaba Cloud's own words: \"ZDR is available to enterprise customers with an Alibaba Cloud account manager, subject to a needs assessment.\" Source: https://www.alibabacloud.com/help/en/model-studio/data-retention-policy"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/alibaba/aibom/annotation/notice",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/alibaba/aibom/document",
      "contentType": "text/plain",
      "statement": "This record is a factual recitation of publicly available vendor documentation as of the verification date. It does not constitute a legal opinion, a regulatory compliance certification, or an allegation of wrongdoing. The kept pages are held strictly as an evidentiary record that supports these findings."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/alibaba/aibom/annotation/signature",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/alibaba/aibom/document",
      "contentType": "text/plain",
      "statement": "The AIBOM files of this record are not signed. A signature waits on a signing key held in a key management service. Until then, check each quote against the kept page and its sha256."
    }
  ]
}