{
  "@context": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld",
  "@graph": [
    {
      "type": "CreationInfo",
      "@id": "_:creationInfo",
      "specVersion": "3.0.1",
      "created": "2026-11-04T00:00:00Z",
      "createdBy": [
        "https://jesseahawkins.com/vendors/moonshot/aibom/tool"
      ]
    },
    {
      "type": "Tool",
      "spdxId": "https://jesseahawkins.com/vendors/moonshot/aibom/tool",
      "creationInfo": "_:creationInfo",
      "name": "jesseahawkins.com vendor record"
    },
    {
      "type": "SpdxDocument",
      "spdxId": "https://jesseahawkins.com/vendors/moonshot/aibom/document",
      "creationInfo": "_:creationInfo",
      "name": "AI BOM for Moonshot AI: Kimi OpenPlatform API",
      "profileConformance": [
        "core",
        "software",
        "ai"
      ],
      "rootElement": [
        "https://jesseahawkins.com/vendors/moonshot/aibom/ai-package"
      ]
    },
    {
      "type": "ai_AIPackage",
      "spdxId": "https://jesseahawkins.com/vendors/moonshot/aibom/ai-package",
      "creationInfo": "_:creationInfo",
      "name": "Moonshot AI: Kimi OpenPlatform API"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/moonshot/aibom/annotation/ai_subprocessors",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/moonshot/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "ai_subprocessors = Service providers by category; no list. Evidence snapshot sha256:2128083a8111ef084b0fae1f330b8f941643b2ef818d35e68392e210e376029c; recorded 2026-10-26T00:00:00Z; valid from 2026-10-26. Responsive to (not compliant with): dora-roi@2024-2956:B_05.02 iso-42001@2023:A.10.2 iso-42001@2023:A.10.3 nist-ai-rmf@1.0:GOVERN-6.1 nist-ai-rmf@1.0:MANAGE-3.1."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/moonshot/aibom/annotation/customer_data_retention_period",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/moonshot/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "customer_data_retention_period = While the account is active, with listed exceptions. Evidence snapshot sha256:2128083a8111ef084b0fae1f330b8f941643b2ef818d35e68392e210e376029c; recorded 2026-10-26T00:00:00Z; valid from 2026-10-26. Responsive to (not compliant with): iso-42001@2023:A.7.3 nist-ai-rmf@1.0:MEASURE-2.10."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/moonshot/aibom/annotation/data_residency",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/moonshot/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "data_residency = Stored in Singapore. Evidence snapshot sha256:2128083a8111ef084b0fae1f330b8f941643b2ef818d35e68392e210e376029c; recorded 2026-10-26T00:00:00Z; valid from 2026-10-26."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/moonshot/aibom/annotation/trains_on_customer_data",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/moonshot/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "trains_on_customer_data = Yes, unless agreed otherwise in writing. Evidence snapshot sha256:2f2977a5126855fd50e4eca35a341fafc3e7876677239d7a6b1a3625873373fe; recorded 2026-10-26T00:00:00Z; valid from 2026-10-26. Responsive to (not compliant with): eu-ai-act@2026-07-27:annex-iv/2/d eu-ai-act@2026-07-27:annex-xi/s1/2/c iso-42001@2023:A.7.3 iso-42001@2023:A.7.5 nist-ai-rmf@1.0:MEASURE-2.10."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/moonshot/aibom/annotation/usage_limits",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/moonshot/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "usage_limits = Concurrency, requests and tokens limits by cumulative recharge; limits can change with load. Evidence snapshot sha256:53f97162ea20a9337c2716e925580ab297d04d54cb11393324229e1b9f0c25de; recorded 2026-11-03T00:00:00Z; valid from 2026-11-03."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/moonshot/aibom/annotation/certifications",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/moonshot/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "certifications is recorded with no value (fact moonshot/certifications@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/moonshot/aibom/annotation/dpa",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/moonshot/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "dpa is recorded with no value (fact moonshot/dpa@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/moonshot/aibom/annotation/zero_data_retention",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/moonshot/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "zero_data_retention is recorded with no value (fact moonshot/zero_data_retention@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/moonshot/aibom/annotation/ai_subprocessors/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/moonshot/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "ai_subprocessors, in Moonshot AI's own words: \"These providers include hosting services, customer service vendors, cloud services, content delivery services, support and safety monitoring services, email communication software, web analytics services, payment and transaction processors, and other information technology providers.\" Source: https://platform.kimi.ai/docs/agreement/userprivacy"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/moonshot/aibom/annotation/customer_data_retention_period/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/moonshot/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "customer_data_retention_period, in Moonshot AI's own words: \"Retention periods vary based on factors such as information type, sensitivity, and legal requirements. For example, account, input, and payment information are retained while your account is active. Violation-related information is retained until the violation is resolved. Also, in some cases, the length of time we retain data depends on your settings.\" Source: https://platform.kimi.ai/docs/agreement/userprivacy"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/moonshot/aibom/annotation/data_residency/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/moonshot/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "data_residency, in Moonshot AI's own words: \"We store the information we collect in secure servers located in Singapore.\" Source: https://platform.kimi.ai/docs/agreement/userprivacy"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/moonshot/aibom/annotation/trains_on_customer_data/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/moonshot/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "trains_on_customer_data, in Moonshot AI's own words: \"Customer who requires restrictions on the use of Customer Content for training or improving Moonshot AI models may contact Moonshot AI to discuss available enterprise arrangements or separate written agreements. Unless otherwise expressly agreed in writing, Customer Content may be used for the foregoing purposes.\" Source: https://platform.kimi.ai/docs/agreement/modeluse"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/moonshot/aibom/annotation/usage_limits/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/moonshot/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "usage_limits, in Moonshot AI's own words: \"Rate limits are applied based on each account’s cumulative recharge amount to ensure fair resource distribution and prevent abuse.\" Source: https://platform.kimi.ai/docs/pricing/limits"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/moonshot/aibom/annotation/notice",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/moonshot/aibom/document",
      "contentType": "text/plain",
      "statement": "This record is a factual recitation of publicly available vendor documentation as of the verification date. It does not constitute a legal opinion, a regulatory compliance certification, or an allegation of wrongdoing. The kept pages are held strictly as an evidentiary record that supports these findings."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/moonshot/aibom/annotation/signature",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/moonshot/aibom/document",
      "contentType": "text/plain",
      "statement": "The AIBOM files of this record are not signed. A signature waits on a signing key held in a key management service. Until then, check each quote against the kept page and its sha256."
    }
  ]
}