{
  "@context": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld",
  "@graph": [
    {
      "type": "CreationInfo",
      "@id": "_:creationInfo",
      "specVersion": "3.0.1",
      "created": "2026-11-04T00:00:00Z",
      "createdBy": [
        "https://jesseahawkins.com/vendors/stepfun/aibom/tool"
      ]
    },
    {
      "type": "Tool",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/tool",
      "creationInfo": "_:creationInfo",
      "name": "jesseahawkins.com vendor record"
    },
    {
      "type": "SpdxDocument",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/document",
      "creationInfo": "_:creationInfo",
      "name": "AI BOM for StepFun: StepFun Open Platform, international site",
      "profileConformance": [
        "core",
        "software",
        "ai"
      ],
      "rootElement": [
        "https://jesseahawkins.com/vendors/stepfun/aibom/ai-package"
      ]
    },
    {
      "type": "ai_AIPackage",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/ai-package",
      "creationInfo": "_:creationInfo",
      "name": "StepFun: StepFun Open Platform, international site"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/annotation/ai_subprocessors",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/stepfun/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "ai_subprocessors = The customer gives StepFun general authorization to engage subprocessors. Evidence snapshot sha256:4f6547754c82d04d002040a48dfc7dbf15434cb0a9549f97ade574eae9dd2f6b; recorded 2026-11-04T00:00:00Z; valid from 2026-11-04. Responsive to (not compliant with): dora-roi@2024-2956:B_05.02 iso-42001@2023:A.10.2 iso-42001@2023:A.10.3 nist-ai-rmf@1.0:GOVERN-6.1 nist-ai-rmf@1.0:MANAGE-3.1."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/annotation/customer_data_retention_period",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/stepfun/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "customer_data_retention_period = Customer Data is deleted within 30 days after the agreement ends, with exceptions. Evidence snapshot sha256:4f6547754c82d04d002040a48dfc7dbf15434cb0a9549f97ade574eae9dd2f6b; recorded 2026-11-04T00:00:00Z; valid from 2026-11-04. Responsive to (not compliant with): iso-42001@2023:A.7.3 nist-ai-rmf@1.0:MEASURE-2.10."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/annotation/data_residency",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/stepfun/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "data_residency = Privacy policy: servers in the United States; affiliates and providers elsewhere may access data. Evidence snapshot sha256:cb0c3efb4fe3cc776ece0969f1ac1cf47d99cebbf969c607a92e06d70be35380; recorded 2026-11-04T00:00:00Z; valid from 2026-11-04."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/annotation/dpa",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/stepfun/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "dpa = A DPA forms part of the Terms of Service and applies to StepFun’s processing of Customer Data. Evidence snapshot sha256:4f6547754c82d04d002040a48dfc7dbf15434cb0a9549f97ade574eae9dd2f6b; recorded 2026-11-04T00:00:00Z; valid from 2026-11-04."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/annotation/trains_on_customer_data",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/stepfun/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "trains_on_customer_data = May train: the terms license prompts, outputs and API call logs to StepFun for any purpose. Evidence snapshot sha256:ba64e4507c3fe00741365f5c316e28df82af866a3e7de8b2915bd3bd29cbebb2; recorded 2026-11-04T00:00:00Z; valid from 2026-11-04. Responsive to (not compliant with): eu-ai-act@2026-07-27:annex-iv/2/d eu-ai-act@2026-07-27:annex-xi/s1/2/c iso-42001@2023:A.7.3 iso-42001@2023:A.7.5 nist-ai-rmf@1.0:MEASURE-2.10."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/annotation/usage_limits",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/stepfun/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "usage_limits = Pay-as-you-go rate limits by tier of cash top-up; enterprise tiers through sales. Evidence snapshot sha256:392dc4e5afc265b83d9894e987e187d5fbca4833942bb9f4b861320aae32bb0c; recorded 2026-11-04T00:00:00Z; valid from 2026-11-04."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/annotation/certifications",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/stepfun/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "certifications is recorded with no value (fact stepfun/certifications@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/annotation/zero_data_retention",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/stepfun/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "zero_data_retention is recorded with no value (fact stepfun/zero_data_retention@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/annotation/ai_subprocessors/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/stepfun/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "ai_subprocessors, in StepFun's own words: \"Customer grants StepFun general authorization to engage subprocessors.\" Source: https://platform.stepfun.ai/docs/en/agreement/dataprocess"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/annotation/customer_data_retention_period/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/stepfun/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "customer_data_retention_period, in StepFun's own words: \"Within 30 days of termination or expiration of the Agreement, StepFun will:\" Source: https://platform.stepfun.ai/docs/en/agreement/dataprocess"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/annotation/data_residency/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/stepfun/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "data_residency, in StepFun's own words: \"Our servers are located in the United States. Meanwhile, due to the international nature of our business, your personal information may also be accessed by our affiliates or be transferred to third-party service providers and business partners, in connection with the purposes set out in this Policy.\" Source: https://platform.stepfun.ai/docs/en/agreement/userprivacy"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/annotation/dpa/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/stepfun/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "dpa, in StepFun's own words: \"This Data Processing Agreement (“DPA”) is incorporated into and forms part of the Terms of Service or other agreement between Customer and StepFun that references this DPA and governs Customer’s use of the Services (the “Agreement”). It applies to StepFun’s processing of Customer Data as defined below.\" Source: https://platform.stepfun.ai/docs/en/agreement/dataprocess"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/annotation/trains_on_customer_data/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/stepfun/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "trains_on_customer_data, in StepFun's own words: \"When you use the Services in accordance with these Terms, you grant us, to the fullest extent permitted under the applicable law, a nonexclusive, worldwide, royalty-free, fully paid up, transferable, sublicensable, perpetual, irrevocable license to copy, display, upload, perform, distribute, transmit, make available, store, access, modify, exploit, commercialize and otherwise use all Output, Prompts and associated API call logs (“Usage Data”) elicited by you for any purpose in any form, medium or technology now known or later developed, including but not limited to (i) facilitating other users’ ability to elicit Output, and (ii) promoting the Services.\" Source: https://platform.stepfun.ai/docs/en/agreement/userservice"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/annotation/usage_limits/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/stepfun/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "usage_limits, in StepFun's own words: \"Pay-as-you-go calls to the standard Open Platform API are rate limited by tier according to the cumulative top-up amount on your account. Only cash top-ups count toward that amount; vouchers do not.\" Source: https://platform.stepfun.ai/docs/en/guides/pricing/details"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/annotation/notice",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/stepfun/aibom/document",
      "contentType": "text/plain",
      "statement": "This record is a factual recitation of publicly available vendor documentation as of the verification date. It does not constitute a legal opinion, a regulatory compliance certification, or an allegation of wrongdoing. The kept pages are held strictly as an evidentiary record that supports these findings."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/stepfun/aibom/annotation/signature",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/stepfun/aibom/document",
      "contentType": "text/plain",
      "statement": "The AIBOM files of this record are not signed. A signature waits on a signing key held in a key management service. Until then, check each quote against the kept page and its sha256."
    }
  ]
}