Vendors · Questionnaire · Tencent

Read Tencent’s own answers to nine buyer questions

Tencent HY (Hunyuan) on Tencent Cloud International. Each answer quotes Tencent’s own page or feed as kept on the day shown. Each question cites the NIST text that asks it. The answers are not a score and not a verdict.

Tencent in the vendor record tencent-questionnaire.csv

Does the vendor train its models on business and API customers’ data?

NIST AI 600-1, action GV-6.2-007: “… contribute to unauthorized data collection by vendors or third-parties (e.g., secondary data use) …”

NIST AI RMF 1.0, MEASURE 2.10

Not published in the pages kept

Searched: Tencent HY 3D Global and Text Generation Privacy Policy; Privacy Policy; Data Processing and Security Agreement; Privacy FAQs.

Does the vendor train its models on free and consumer use of its products?

NIST AI 600-1, action GV-6.2-007: “… contribute to unauthorized data collection by vendors or third-parties (e.g., secondary data use) …”

NIST AI RMF 1.0, MEASURE 2.10

Not read

The vendor record does not read this point for Tencent.

How long does the vendor keep the data that customers send?

NIST AI 600-1, action GV-6.1-004: “Draft and maintain well-defined contracts and service level agreements (SLAs) that specify content ownership, usage rights, quality standards, security requirements, and content provenance expectations for GAI systems.”

NIST AI RMF 1.0, MEASURE 2.10

Generally up to 7 days for the HY module’s listed data, longer for billing; varies with settings

For Account Data, Configuration Data, Network and Connection Data, and Diagnostic and Usage Data, we generally retain information for up to 7 days after your task request in connection with the Features to provide you the Features and for troubleshooting purposes, but may process or retain such data for a longer period (for example as long as you use the Features) for billing purposes.

This is the HY product module, for “Tencent HY 3D Global, and Text Generation”. Diagnostic and Usage Data includes “output information”, and the module does not name prompts. It adds: “The actual retention period can vary for different data categories”. The umbrella DPSA, which does not list the HY module, gives the duration of the Terms of Service as the period for personal data in uploaded Content, and says Tencent returns or destroys personal data when the customer asks. Tencent HY 3D Global and Text Generation Privacy Policy, kept 4 Nov 2026 · sha256 1a363137893a

Can a customer have the vendor keep none of its data?

NIST AI RMF 1.0, MEASURE 2.10

Not published in the pages kept

Searched: Tencent HY 3D Global and Text Generation Privacy Policy; Privacy Policy; Data Processing and Security Agreement; Privacy FAQs.

Where does the vendor process and store customer data?

NIST AI 600-1, action GV-6.1-009: “Update and integrate due diligence processes for GAI acquisition and procurement vendor assessments to include intellectual property, data privacy …”

NIST AI RMF 1.0, GOVERN 6.1

Personal Data processed in the Service Region the customer selects, with exceptions

5.1 Subject to clause 5.2, where Organisation has selected a Service Region for the Services, Tencent will Process Personal Data in that Service Region.

Tencent Cloud International umbrella document, not specific to HY. Clause 5.2 says Tencent “may need to Process Personal Data outside the Service Region from time to time”, with prior consent or authorisation; authorising Sub-Processors counts as that consent. Data Processing and Security Agreement, kept 4 Nov 2026 · sha256 f4ca9074d616

Which other companies process customer data for the vendor?

NIST AI 600-1, action GV-6.1-007: “Inventory all third-party entities with access to organizational content and establish approved GAI technology and service provider lists.”

NIST AI RMF 1.0, GOVERN 6.1; NIST AI RMF 1.0, MANAGE 3.1

Listed on a Third Party Information page; 14 days to object to changes, where law requires notice

Organisation hereby grants Tencent general written authorisation to engage such Sub-Processors listed at Third Party Information to Process Personal Data on its behalf, subject to the requirements of this clause 8.

Tencent Cloud International umbrella document; it does not name AI sub-processors. Clause 8.2 gives notice of changes “to the extent its processing of the Personal Data is subject to Data Protection Laws that require such notification”, then “fourteen (14) days from the date of receipt of the notice to approve or reject the change.” Data Processing and Security Agreement, kept 4 Nov 2026 · sha256 f4ca9074d616

Which independent audits or certifications does the vendor name?

NIST AI 600-1, Appendix A.1.3: “statement on standards for attestation engagement (SSAE) reports to help with third-party transparency and risk management for GAI systems”

NIST AI RMF 1.0, GOVERN 6.1

Not published in the pages kept

Searched: Tencent HY 3D Global and Text Generation Privacy Policy; Privacy Policy; Data Processing and Security Agreement; Privacy FAQs.

Does the vendor publish a history of its service incidents?

NIST AI 600-1, action GV-6.2-007: “Service Level Agreements (SLAs) in vendor contracts that address incident response, response times, and availability of critical support.”

NIST AI RMF 1.0, GOVERN 6.2

No answer kept

Tencent Cloud International links no public status page or history feed for Tencent HY. The page.

Does the vendor publish the dates on which it retires its models?

NIST AI 600-1, action GV-6.2-007: “Review vendor contracts and avoid arbitrary or capricious termination of critical GAI technologies or vendor services …”

NIST AI RMF 1.0, GOVERN 6.2

Not read

This site reads no retirement page for Tencent.

Sources

tencent-questionnaire.csv Every dataset → Status → Glossary →

Tencent, Tencent HY 3D Global and Text Generation Privacy Policy, kept 4 Nov 2026.
Tencent, Data Processing and Security Agreement, kept 4 Nov 2026.
NIST, NIST AI 600-1, 2024-07. Republished courtesy of the National Institute of Standards and Technology.