{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b1388209-fb64-50d1-8fe1-687937a35bda",
  "version": 1,
  "metadata": {
    "timestamp": "2026-11-04T00:00:00Z"
  },
  "components": [
    {
      "type": "machine-learning-model",
      "bom-ref": "https://jesseahawkins.com/vendors/perplexity/aibom/component",
      "name": "Perplexity: Perplexity API Platform",
      "properties": [
        {
          "name": "com.jesseahawkins:fact:ai_subprocessors",
          "value": "Listed on its Trust Center"
        },
        {
          "name": "com.jesseahawkins:evidence:ai_subprocessors",
          "value": "snapshot:sha256:9ee8051da300c4378c115cd4a057dc66bdc9b63855ad9c9fd8f1cc201228fea1"
        },
        {
          "name": "com.jesseahawkins:recorded-at:ai_subprocessors",
          "value": "2026-10-26T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:ai_subprocessors",
          "value": "2026-10-26"
        },
        {
          "name": "com.jesseahawkins:responsive-to:ai_subprocessors",
          "value": "dora-roi@2024-2956:B_05.02 iso-42001@2023:A.10.2 iso-42001@2023:A.10.3 nist-ai-rmf@1.0:GOVERN-6.1 nist-ai-rmf@1.0:MANAGE-3.1"
        },
        {
          "name": "com.jesseahawkins:fact:certifications",
          "value": "SOC 2 Type II"
        },
        {
          "name": "com.jesseahawkins:evidence:certifications",
          "value": "snapshot:sha256:9ee8051da300c4378c115cd4a057dc66bdc9b63855ad9c9fd8f1cc201228fea1"
        },
        {
          "name": "com.jesseahawkins:recorded-at:certifications",
          "value": "2026-10-26T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:certifications",
          "value": "2026-10-26"
        },
        {
          "name": "com.jesseahawkins:fact:dpa",
          "value": "Personal data processed under its Data Processing Addendum"
        },
        {
          "name": "com.jesseahawkins:evidence:dpa",
          "value": "snapshot:sha256:9ee8051da300c4378c115cd4a057dc66bdc9b63855ad9c9fd8f1cc201228fea1"
        },
        {
          "name": "com.jesseahawkins:recorded-at:dpa",
          "value": "2026-10-26T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:dpa",
          "value": "2026-10-26"
        },
        {
          "name": "com.jesseahawkins:fact:trains_on_customer_data",
          "value": "Not by default"
        },
        {
          "name": "com.jesseahawkins:evidence:trains_on_customer_data",
          "value": "snapshot:sha256:9ee8051da300c4378c115cd4a057dc66bdc9b63855ad9c9fd8f1cc201228fea1"
        },
        {
          "name": "com.jesseahawkins:recorded-at:trains_on_customer_data",
          "value": "2026-10-26T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:trains_on_customer_data",
          "value": "2026-10-26"
        },
        {
          "name": "com.jesseahawkins:responsive-to:trains_on_customer_data",
          "value": "eu-ai-act@2026-07-27:annex-iv/2/d eu-ai-act@2026-07-27:annex-xi/s1/2/c iso-42001@2023:A.7.3 iso-42001@2023:A.7.5 nist-ai-rmf@1.0:MEASURE-2.10"
        },
        {
          "name": "com.jesseahawkins:fact:usage_limits",
          "value": "Rate limits by usage tier, from cumulative spend"
        },
        {
          "name": "com.jesseahawkins:evidence:usage_limits",
          "value": "snapshot:sha256:f4a6c2821eade4620183f3643f6644ea45074346f27ae91c83ae996f937cae0a"
        },
        {
          "name": "com.jesseahawkins:recorded-at:usage_limits",
          "value": "2026-11-03T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:usage_limits",
          "value": "2026-11-03"
        },
        {
          "name": "com.jesseahawkins:fact:zero_data_retention",
          "value": "Zero Data Retention, for eligible customers by written agreement"
        },
        {
          "name": "com.jesseahawkins:evidence:zero_data_retention",
          "value": "snapshot:sha256:9ee8051da300c4378c115cd4a057dc66bdc9b63855ad9c9fd8f1cc201228fea1"
        },
        {
          "name": "com.jesseahawkins:recorded-at:zero_data_retention",
          "value": "2026-10-26T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:zero_data_retention",
          "value": "2026-10-26"
        },
        {
          "name": "com.jesseahawkins:withheld:customer_data_retention_period",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:withheld:data_residency",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:quote:ai_subprocessors",
          "value": "Personal data: Perplexity processes personal data in accordance with its Data Processing Addendum, and information about subprocessors is available on Perplexity’s Trust Center."
        },
        {
          "name": "com.jesseahawkins:source:ai_subprocessors",
          "value": "https://docs.perplexity.ai/docs/resources/privacy-security"
        },
        {
          "name": "com.jesseahawkins:quote:certifications",
          "value": "SOC 2 Type II Report - Comprehensive security controls audit covering security, availability, processing integrity, confidentiality, and privacy"
        },
        {
          "name": "com.jesseahawkins:source:certifications",
          "value": "https://docs.perplexity.ai/docs/resources/privacy-security"
        },
        {
          "name": "com.jesseahawkins:quote:dpa",
          "value": "Personal data: Perplexity processes personal data in accordance with its Data Processing Addendum, and information about subprocessors is available on Perplexity’s Trust Center."
        },
        {
          "name": "com.jesseahawkins:source:dpa",
          "value": "https://docs.perplexity.ai/docs/resources/privacy-security"
        },
        {
          "name": "com.jesseahawkins:quote:trains_on_customer_data",
          "value": "No training by default: Under the API Terms of Service, Perplexity does not use Customer Content to train generative AI models. Certain APIs may be subject to product-specific terms."
        },
        {
          "name": "com.jesseahawkins:source:trains_on_customer_data",
          "value": "https://docs.perplexity.ai/docs/resources/privacy-security"
        },
        {
          "name": "com.jesseahawkins:quote:usage_limits",
          "value": "Usage tiers determine your rate limits and access to beta features based on your cumulative API spending."
        },
        {
          "name": "com.jesseahawkins:source:usage_limits",
          "value": "https://docs.perplexity.ai/docs/admin/rate-limits-usage-tiers"
        },
        {
          "name": "com.jesseahawkins:quote:zero_data_retention",
          "value": "ZDR is available only to eligible customers through an account-level configuration under a written agreement with Perplexity."
        },
        {
          "name": "com.jesseahawkins:source:zero_data_retention",
          "value": "https://docs.perplexity.ai/docs/resources/privacy-security"
        }
      ]
    }
  ],
  "properties": [
    {
      "name": "com.jesseahawkins:vendor",
      "value": "perplexity"
    },
    {
      "name": "com.jesseahawkins:record",
      "value": "https://jesseahawkins.com/vendors/perplexity/"
    },
    {
      "name": "com.jesseahawkins:notice",
      "value": "This record is a factual recitation of publicly available vendor documentation as of the verification date. It does not constitute a legal opinion, a regulatory compliance certification, or an allegation of wrongdoing. The kept pages are held strictly as an evidentiary record that supports these findings."
    },
    {
      "name": "com.jesseahawkins:signed",
      "value": "false"
    },
    {
      "name": "com.jesseahawkins:signature-note",
      "value": "The AIBOM files of this record are not signed. A signature waits on a signing key held in a key management service. Until then, check each quote against the kept page and its sha256."
    }
  ]
}