{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8a6a707f-f37b-57ba-a780-c1b7088baf3d",
  "version": 1,
  "metadata": {
    "timestamp": "2026-11-04T00:00:00Z"
  },
  "components": [
    {
      "type": "machine-learning-model",
      "bom-ref": "https://jesseahawkins.com/vendors/tencent/aibom/component",
      "name": "Tencent: Tencent HY (Hunyuan) on Tencent Cloud International",
      "properties": [
        {
          "name": "com.jesseahawkins:fact:ai_subprocessors",
          "value": "Listed on a Third Party Information page; 14 days to object to changes, where law requires notice"
        },
        {
          "name": "com.jesseahawkins:evidence:ai_subprocessors",
          "value": "snapshot:sha256:f4ca9074d616075ccc1a5ec836e2111cdb2d02a186ec4ef306a38a7f8009dfcc"
        },
        {
          "name": "com.jesseahawkins:recorded-at:ai_subprocessors",
          "value": "2026-11-04T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:ai_subprocessors",
          "value": "2026-11-04"
        },
        {
          "name": "com.jesseahawkins:responsive-to:ai_subprocessors",
          "value": "dora-roi@2024-2956:B_05.02 iso-42001@2023:A.10.2 iso-42001@2023:A.10.3 nist-ai-rmf@1.0:GOVERN-6.1 nist-ai-rmf@1.0:MANAGE-3.1"
        },
        {
          "name": "com.jesseahawkins:fact:customer_data_retention_period",
          "value": "Generally up to 7 days for the HY module’s listed data, longer for billing; varies with settings"
        },
        {
          "name": "com.jesseahawkins:evidence:customer_data_retention_period",
          "value": "snapshot:sha256:1a363137893a3b0c6d3b26e721b2b5ae42f6f52858e9ed4279ef0a82143f1664"
        },
        {
          "name": "com.jesseahawkins:recorded-at:customer_data_retention_period",
          "value": "2026-11-04T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:customer_data_retention_period",
          "value": "2026-11-04"
        },
        {
          "name": "com.jesseahawkins:responsive-to:customer_data_retention_period",
          "value": "iso-42001@2023:A.7.3 nist-ai-rmf@1.0:MEASURE-2.10"
        },
        {
          "name": "com.jesseahawkins:fact:data_residency",
          "value": "Personal Data processed in the Service Region the customer selects, with exceptions"
        },
        {
          "name": "com.jesseahawkins:evidence:data_residency",
          "value": "snapshot:sha256:f4ca9074d616075ccc1a5ec836e2111cdb2d02a186ec4ef306a38a7f8009dfcc"
        },
        {
          "name": "com.jesseahawkins:recorded-at:data_residency",
          "value": "2026-11-04T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:data_residency",
          "value": "2026-11-04"
        },
        {
          "name": "com.jesseahawkins:fact:dpa",
          "value": "A Data Processing and Security Addendum covers Content under the Terms of Service, not account data"
        },
        {
          "name": "com.jesseahawkins:evidence:dpa",
          "value": "snapshot:sha256:f4ca9074d616075ccc1a5ec836e2111cdb2d02a186ec4ef306a38a7f8009dfcc"
        },
        {
          "name": "com.jesseahawkins:recorded-at:dpa",
          "value": "2026-11-04T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:dpa",
          "value": "2026-11-04"
        },
        {
          "name": "com.jesseahawkins:withheld:certifications",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:withheld:trains_on_customer_data",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:withheld:usage_limits",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:withheld:zero_data_retention",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:quote:ai_subprocessors",
          "value": "Organisation hereby grants Tencent general written authorisation to engage such Sub-Processors listed at Third Party Information to Process Personal Data on its behalf, subject to the requirements of this clause 8."
        },
        {
          "name": "com.jesseahawkins:source:ai_subprocessors",
          "value": "https://www.tencentcloud.com/document/product/301/17347"
        },
        {
          "name": "com.jesseahawkins:quote:customer_data_retention_period",
          "value": "For Account Data, Configuration Data, Network and Connection Data, and Diagnostic and Usage Data, we generally retain information for up to 7 days after your task request in connection with the Features to provide you the Features and for troubleshooting purposes, but may process or retain such data for a longer period (for example as long as you use the Features) for billing purposes."
        },
        {
          "name": "com.jesseahawkins:source:customer_data_retention_period",
          "value": "https://www.tencentcloud.com/document/product/1284/75293"
        },
        {
          "name": "com.jesseahawkins:quote:data_residency",
          "value": "5.1 Subject to clause 5.2, where Organisation has selected a Service Region for the Services, Tencent will Process Personal Data in that Service Region."
        },
        {
          "name": "com.jesseahawkins:source:data_residency",
          "value": "https://www.tencentcloud.com/document/product/301/17347"
        },
        {
          "name": "com.jesseahawkins:quote:dpa",
          "value": "This DPSA applies if you have entered into the Terms of Service for the supply of Services by Tencent. This DPSA applies to the Processing of Content. Personal Data that is Administrative Information is Processed in accordance with the Privacy Policy and this DPSA shall not apply to the Processing of Administrative Information."
        },
        {
          "name": "com.jesseahawkins:source:dpa",
          "value": "https://www.tencentcloud.com/document/product/301/17347"
        }
      ]
    }
  ],
  "properties": [
    {
      "name": "com.jesseahawkins:vendor",
      "value": "tencent"
    },
    {
      "name": "com.jesseahawkins:record",
      "value": "https://jesseahawkins.com/vendors/tencent/"
    },
    {
      "name": "com.jesseahawkins:notice",
      "value": "This record is a factual recitation of publicly available vendor documentation as of the verification date. It does not constitute a legal opinion, a regulatory compliance certification, or an allegation of wrongdoing. The kept pages are held strictly as an evidentiary record that supports these findings."
    },
    {
      "name": "com.jesseahawkins:signed",
      "value": "false"
    },
    {
      "name": "com.jesseahawkins:signature-note",
      "value": "The AIBOM files of this record are not signed. A signature waits on a signing key held in a key management service. Until then, check each quote against the kept page and its sha256."
    }
  ]
}