{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e3d648c8-5a53-5e04-98f0-eeb2414c40c6",
  "version": 1,
  "metadata": {
    "timestamp": "2026-11-04T00:00:00Z"
  },
  "components": [
    {
      "type": "machine-learning-model",
      "bom-ref": "https://jesseahawkins.com/vendors/deepseek/aibom/component",
      "name": "DeepSeek: DeepSeek services and Open Platform",
      "properties": [
        {
          "name": "com.jesseahawkins:fact:ai_subprocessors",
          "value": "Service providers by category; no list in the kept pages"
        },
        {
          "name": "com.jesseahawkins:evidence:ai_subprocessors",
          "value": "snapshot:sha256:339984e36a795843ee2b5b917797072ec249f3c0e9ff7cbbfe754c01caa4f069"
        },
        {
          "name": "com.jesseahawkins:recorded-at:ai_subprocessors",
          "value": "2026-10-24T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:ai_subprocessors",
          "value": "2026-10-24"
        },
        {
          "name": "com.jesseahawkins:responsive-to:ai_subprocessors",
          "value": "dora-roi@2024-2956:B_05.02 iso-42001@2023:A.10.2 iso-42001@2023:A.10.3 nist-ai-rmf@1.0:GOVERN-6.1 nist-ai-rmf@1.0:MANAGE-3.1"
        },
        {
          "name": "com.jesseahawkins:fact:customer_data_retention_period",
          "value": "As long as necessary; inputs are kept for as long as you have an account"
        },
        {
          "name": "com.jesseahawkins:evidence:customer_data_retention_period",
          "value": "snapshot:sha256:339984e36a795843ee2b5b917797072ec249f3c0e9ff7cbbfe754c01caa4f069"
        },
        {
          "name": "com.jesseahawkins:recorded-at:customer_data_retention_period",
          "value": "2026-10-24T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:customer_data_retention_period",
          "value": "2026-10-24"
        },
        {
          "name": "com.jesseahawkins:responsive-to:customer_data_retention_period",
          "value": "iso-42001@2023:A.7.3 nist-ai-rmf@1.0:MEASURE-2.10"
        },
        {
          "name": "com.jesseahawkins:fact:data_residency",
          "value": "Personal data collected, processed and stored in the People’s Republic of China"
        },
        {
          "name": "com.jesseahawkins:evidence:data_residency",
          "value": "snapshot:sha256:339984e36a795843ee2b5b917797072ec249f3c0e9ff7cbbfe754c01caa4f069"
        },
        {
          "name": "com.jesseahawkins:recorded-at:data_residency",
          "value": "2026-10-24T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:data_residency",
          "value": "2026-10-24"
        },
        {
          "name": "com.jesseahawkins:fact:trains_on_free_use",
          "value": "Listed as a use of personal data"
        },
        {
          "name": "com.jesseahawkins:evidence:trains_on_free_use",
          "value": "snapshot:sha256:339984e36a795843ee2b5b917797072ec249f3c0e9ff7cbbfe754c01caa4f069"
        },
        {
          "name": "com.jesseahawkins:recorded-at:trains_on_free_use",
          "value": "2026-10-24T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:trains_on_free_use",
          "value": "2026-10-24"
        },
        {
          "name": "com.jesseahawkins:fact:usage_limits",
          "value": "Concurrency limits per model, per account"
        },
        {
          "name": "com.jesseahawkins:evidence:usage_limits",
          "value": "snapshot:sha256:f8fa23628232d781347701b85a5a486685a7fb481300971fbb467e82c0d480e2"
        },
        {
          "name": "com.jesseahawkins:recorded-at:usage_limits",
          "value": "2026-11-03T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:usage_limits",
          "value": "2026-11-03"
        },
        {
          "name": "com.jesseahawkins:withheld:certifications",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:withheld:dpa",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:withheld:trains_on_customer_data",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:withheld:zero_data_retention",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:quote:ai_subprocessors",
          "value": "We engage service providers that help us provide, support, and develop the Services and understand how they are used."
        },
        {
          "name": "com.jesseahawkins:source:ai_subprocessors",
          "value": "https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html"
        },
        {
          "name": "com.jesseahawkins:quote:customer_data_retention_period",
          "value": "we keep this Personal Data for as long as you have an account. This Personal Data includes your account Personal Data, input and payment Personal Data."
        },
        {
          "name": "com.jesseahawkins:source:customer_data_retention_period",
          "value": "https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html"
        },
        {
          "name": "com.jesseahawkins:quote:data_residency",
          "value": "To provide you with our services, we directly collect, process and store your Personal Data in People's Republic of China."
        },
        {
          "name": "com.jesseahawkins:source:data_residency",
          "value": "https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html"
        },
        {
          "name": "com.jesseahawkins:quote:trains_on_free_use",
          "value": "To improve and develop the Services and to train and improve our technology, such as our machine learning models and algorithms."
        },
        {
          "name": "com.jesseahawkins:source:trains_on_free_use",
          "value": "https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html"
        },
        {
          "name": "com.jesseahawkins:quote:usage_limits",
          "value": "For each account, the concurrency limits for different DeepSeek API models are shown in the table below."
        },
        {
          "name": "com.jesseahawkins:source:usage_limits",
          "value": "https://api-docs.deepseek.com/quick_start/rate_limit/"
        }
      ]
    }
  ],
  "properties": [
    {
      "name": "com.jesseahawkins:vendor",
      "value": "deepseek"
    },
    {
      "name": "com.jesseahawkins:record",
      "value": "https://jesseahawkins.com/vendors/deepseek/"
    },
    {
      "name": "com.jesseahawkins:notice",
      "value": "This record is a factual recitation of publicly available vendor documentation as of the verification date. It does not constitute a legal opinion, a regulatory compliance certification, or an allegation of wrongdoing. The kept pages are held strictly as an evidentiary record that supports these findings."
    },
    {
      "name": "com.jesseahawkins:signed",
      "value": "false"
    },
    {
      "name": "com.jesseahawkins:signature-note",
      "value": "The AIBOM files of this record are not signed. A signature waits on a signing key held in a key management service. Until then, check each quote against the kept page and its sha256."
    }
  ]
}