{
  "@context": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld",
  "@graph": [
    {
      "type": "CreationInfo",
      "@id": "_:creationInfo",
      "specVersion": "3.0.1",
      "created": "2026-11-04T00:00:00Z",
      "createdBy": [
        "https://jesseahawkins.com/vendors/gemini-app/aibom/tool"
      ]
    },
    {
      "type": "Tool",
      "spdxId": "https://jesseahawkins.com/vendors/gemini-app/aibom/tool",
      "creationInfo": "_:creationInfo",
      "name": "jesseahawkins.com vendor record"
    },
    {
      "type": "SpdxDocument",
      "spdxId": "https://jesseahawkins.com/vendors/gemini-app/aibom/document",
      "creationInfo": "_:creationInfo",
      "name": "AI BOM for Gemini Apps: Gemini Apps for personal Google Accounts",
      "profileConformance": [
        "core",
        "software",
        "ai"
      ],
      "rootElement": [
        "https://jesseahawkins.com/vendors/gemini-app/aibom/ai-package"
      ]
    },
    {
      "type": "ai_AIPackage",
      "spdxId": "https://jesseahawkins.com/vendors/gemini-app/aibom/ai-package",
      "creationInfo": "_:creationInfo",
      "name": "Gemini Apps: Gemini Apps for personal Google Accounts"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/gemini-app/aibom/annotation/ai_subprocessors",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/gemini-app/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "ai_subprocessors = Service providers' reviewers see some chats, disconnected from the account; none are named. Evidence snapshot sha256:ee8f0fa990d2760ebb62bbd7bad5cd6352b42e56252a35987d877bddb685621c; recorded 2026-11-04T00:00:00Z; valid from 2026-11-04. Responsive to (not compliant with): dora-roi@2024-2956:B_05.02 iso-42001@2023:A.10.2 iso-42001@2023:A.10.3 nist-ai-rmf@1.0:GOVERN-6.1 nist-ai-rmf@1.0:MANAGE-3.1."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/gemini-app/aibom/annotation/customer_data_retention_period",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/gemini-app/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "customer_data_retention_period = Activity auto-deletes after 18 months by default (3, 36 months or indefinite); some chats kept longer. Evidence snapshot sha256:ee8f0fa990d2760ebb62bbd7bad5cd6352b42e56252a35987d877bddb685621c; recorded 2026-11-04T00:00:00Z; valid from 2026-11-04. Responsive to (not compliant with): iso-42001@2023:A.7.3 nist-ai-rmf@1.0:MEASURE-2.10."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/gemini-app/aibom/annotation/trains_on_customer_data",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/gemini-app/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "trains_on_customer_data = Yes while Keep Activity is on; not in temporary chats, or with it off unless you send feedback. Evidence snapshot sha256:ee8f0fa990d2760ebb62bbd7bad5cd6352b42e56252a35987d877bddb685621c; recorded 2026-11-04T00:00:00Z; valid from 2026-11-04. Responsive to (not compliant with): eu-ai-act@2026-07-27:annex-iv/2/d eu-ai-act@2026-07-27:annex-xi/s1/2/c iso-42001@2023:A.7.3 iso-42001@2023:A.7.5 nist-ai-rmf@1.0:MEASURE-2.10."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/gemini-app/aibom/annotation/usage_limits",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/gemini-app/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "usage_limits = Compute-based limits refresh every 5 hours up to a weekly limit; higher on paid plans; may change. Evidence snapshot sha256:9b8c6b0ed82564d6151b3baa7099af9fbadaae654dd2b1fa42c4ebd84b5b9fdf; recorded 2026-11-04T00:00:00Z; valid from 2026-11-04."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/gemini-app/aibom/annotation/certifications",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/gemini-app/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "certifications is recorded with no value (fact gemini-app/certifications@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/gemini-app/aibom/annotation/data_residency",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/gemini-app/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "data_residency is recorded with no value (fact gemini-app/data_residency@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/gemini-app/aibom/annotation/dpa",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/gemini-app/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "dpa is recorded with no value (fact gemini-app/dpa@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/gemini-app/aibom/annotation/zero_data_retention",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/gemini-app/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "zero_data_retention is recorded with no value (fact gemini-app/zero_data_retention@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/gemini-app/aibom/annotation/ai_subprocessors/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/gemini-app/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "ai_subprocessors, in Gemini Apps's own words: \"We take your privacy seriously, and we do not sell your personal information to anyone. Chats are disconnected from your account before being sent to service providers.\" Source: https://support.google.com/gemini/answer/13594961?hl=en"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/gemini-app/aibom/annotation/customer_data_retention_period/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/gemini-app/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "customer_data_retention_period, in Gemini Apps's own words: \"You can change your auto-delete setting in Gemini Apps Activity from the default of 18 months to 3 months, 36 months, or indefinite. You can also manually delete your Gemini Apps chats anytime.\" Source: https://support.google.com/gemini/answer/13594961?hl=en"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/gemini-app/aibom/annotation/trains_on_customer_data/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/gemini-app/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "trains_on_customer_data, in Gemini Apps's own words: \"Google uses your activity to provide, develop, and improve its services (including training generative AI models), as well as to protect Google, its users, and the public with the help of human reviewers.\" Source: https://support.google.com/gemini/answer/13594961?hl=en"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/gemini-app/aibom/annotation/usage_limits/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/gemini-app/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "usage_limits, in Gemini Apps's own words: \"Gemini Apps have compute-based usage limits that determine how much you can interact with Gemini tools and features. These limits factor in the complexity of your prompt, the models and features you use, and the length of your chat. Your limit refreshes every 5 hours until you reach your weekly limit.\" Source: https://support.google.com/gemini/answer/16275805?hl=en"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/gemini-app/aibom/annotation/notice",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/gemini-app/aibom/document",
      "contentType": "text/plain",
      "statement": "This record is a factual recitation of publicly available vendor documentation as of the verification date. It does not constitute a legal opinion, a regulatory compliance certification, or an allegation of wrongdoing. The kept pages are held strictly as an evidentiary record that supports these findings."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/gemini-app/aibom/annotation/signature",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/gemini-app/aibom/document",
      "contentType": "text/plain",
      "statement": "The AIBOM files of this record are not signed. A signature waits on a signing key held in a key management service. Until then, check each quote against the kept page and its sha256."
    }
  ]
}