{
  "@context": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld",
  "@graph": [
    {
      "type": "CreationInfo",
      "@id": "_:creationInfo",
      "specVersion": "3.0.1",
      "created": "2026-11-04T00:00:00Z",
      "createdBy": [
        "https://jesseahawkins.com/vendors/microsoft/aibom/tool"
      ]
    },
    {
      "type": "Tool",
      "spdxId": "https://jesseahawkins.com/vendors/microsoft/aibom/tool",
      "creationInfo": "_:creationInfo",
      "name": "jesseahawkins.com vendor record"
    },
    {
      "type": "SpdxDocument",
      "spdxId": "https://jesseahawkins.com/vendors/microsoft/aibom/document",
      "creationInfo": "_:creationInfo",
      "name": "AI BOM for Microsoft: Azure OpenAI and other models sold by Azure in Microsoft Foundry",
      "profileConformance": [
        "core",
        "software",
        "ai"
      ],
      "rootElement": [
        "https://jesseahawkins.com/vendors/microsoft/aibom/ai-package"
      ]
    },
    {
      "type": "ai_AIPackage",
      "spdxId": "https://jesseahawkins.com/vendors/microsoft/aibom/ai-package",
      "creationInfo": "_:creationInfo",
      "name": "Microsoft: Azure OpenAI and other models sold by Azure in Microsoft Foundry"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/microsoft/aibom/annotation/data_residency",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/microsoft/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "data_residency = In the customer’s chosen geography, except Global and DataZone deployments. Evidence snapshot sha256:cb7f0b5243c1a1e30e5074c37119277a1f985a202df84c4f208cc881f9f23a54; recorded 2026-10-24T00:00:00Z; valid from 2026-10-24."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/microsoft/aibom/annotation/dpa",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/microsoft/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "dpa = The Microsoft data protection addendum, part of the Product Terms. Evidence snapshot sha256:7bf9a5c835832217c1460f4d1a6b908d5d5b887304dd7744d7152f07f61f1b92; recorded 2026-11-03T00:00:00Z; valid from 2026-11-03."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/microsoft/aibom/annotation/trains_on_customer_data",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/microsoft/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "trains_on_customer_data = Not without permission. Evidence snapshot sha256:cb7f0b5243c1a1e30e5074c37119277a1f985a202df84c4f208cc881f9f23a54; recorded 2026-10-24T00:00:00Z; valid from 2026-10-24. Responsive to (not compliant with): eu-ai-act@2026-07-27:annex-iv/2/d eu-ai-act@2026-07-27:annex-xi/s1/2/c iso-42001@2023:A.7.3 iso-42001@2023:A.7.5 nist-ai-rmf@1.0:MEASURE-2.10."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/microsoft/aibom/annotation/usage_limits",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/microsoft/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "usage_limits = Quotas by Azure subscription and quota tier; tiers rise with usage unless the customer opts out. Evidence snapshot sha256:0765f2922a09a1576510fa1111377199c0945476b2066bb55bedad78cb91deaa; recorded 2026-11-03T00:00:00Z; valid from 2026-11-03."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/microsoft/aibom/annotation/zero_data_retention",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/microsoft/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "zero_data_retention = Modified abuse monitoring, by application. Evidence snapshot sha256:8ccd372f07b1ff5025f76ee926a327ed635d65e8bc318ac3d3a498f194d57f6f; recorded 2026-10-24T00:00:00Z; valid from 2026-10-24."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/microsoft/aibom/annotation/ai_subprocessors",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/microsoft/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "ai_subprocessors is recorded with no value (fact microsoft/ai_subprocessors@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/microsoft/aibom/annotation/certifications",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/microsoft/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "certifications is recorded with no value (fact microsoft/certifications@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/microsoft/aibom/annotation/customer_data_retention_period",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/microsoft/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "customer_data_retention_period is recorded with no value (fact microsoft/customer_data_retention_period@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/microsoft/aibom/annotation/data_residency/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/microsoft/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "data_residency, in Microsoft's own words: \"Prompts and responses are processed within the customer-specified geography (unless you are using a Global or DataZone deployment type), but may be processed between regions within the geography for operational purposes (including performance and capacity management).\" Source: https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/microsoft/aibom/annotation/dpa/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/microsoft/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "dpa, in Microsoft's own words: \"When you subscribe to a Product under the terms of the Product Terms site, the data processing and security terms are defined in Microsoft Online Services Data Protection Addendum (DPA). The DPA is an addendum to the Product Terms site (and formerly OST).\" Source: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/microsoft/aibom/annotation/trains_on_customer_data/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/microsoft/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "trains_on_customer_data, in Microsoft's own words: \"Your prompts (inputs) and completions (outputs), your embeddings, and your training data: are NOT available to other customers. are NOT available to OpenAI or other providers of Models sold by Azure. are NOT used by providers of Models sold by Azure to improve their models or services. are NOT used to train any generative AI foundation models without your permission or instruction.\" Source: https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/microsoft/aibom/annotation/usage_limits/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/microsoft/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "usage_limits, in Microsoft's own words: \"Quotas now increase automatically with usage, helping avoid rate limit errors while also creating a fairer environment for all users.\" Source: https://learn.microsoft.com/en-us/azure/foundry/openai/quotas-limits"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/microsoft/aibom/annotation/zero_data_retention/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/microsoft/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "zero_data_retention, in Microsoft's own words: \"Microsoft allows customers who meet additional Limited Access eligibility criteria to apply to modify abuse monitoring by completing this form.\" Source: https://learn.microsoft.com/en-us/azure/foundry/openai/concepts/abuse-monitoring"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/microsoft/aibom/annotation/notice",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/microsoft/aibom/document",
      "contentType": "text/plain",
      "statement": "This record is a factual recitation of publicly available vendor documentation as of the verification date. It does not constitute a legal opinion, a regulatory compliance certification, or an allegation of wrongdoing. The kept pages are held strictly as an evidentiary record that supports these findings."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/microsoft/aibom/annotation/signature",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/microsoft/aibom/document",
      "contentType": "text/plain",
      "statement": "The AIBOM files of this record are not signed. A signature waits on a signing key held in a key management service. Until then, check each quote against the kept page and its sha256."
    }
  ]
}