{
  "@context": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld",
  "@graph": [
    {
      "type": "CreationInfo",
      "@id": "_:creationInfo",
      "specVersion": "3.0.1",
      "created": "2026-11-04T00:00:00Z",
      "createdBy": [
        "https://jesseahawkins.com/vendors/xiaomi/aibom/tool"
      ]
    },
    {
      "type": "Tool",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/tool",
      "creationInfo": "_:creationInfo",
      "name": "jesseahawkins.com vendor record"
    },
    {
      "type": "SpdxDocument",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/document",
      "creationInfo": "_:creationInfo",
      "name": "AI BOM for Xiaomi: Xiaomi MiMo API Open Platform, under its privacy policy for use in China",
      "profileConformance": [
        "core",
        "software",
        "ai"
      ],
      "rootElement": [
        "https://jesseahawkins.com/vendors/xiaomi/aibom/ai-package"
      ]
    },
    {
      "type": "ai_AIPackage",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/ai-package",
      "creationInfo": "_:creationInfo",
      "name": "Xiaomi: Xiaomi MiMo API Open Platform, under its privacy policy for use in China"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/annotation/ai_subprocessors",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/xiaomi/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "ai_subprocessors = Some services use third-party service providers that get some personal information; none named here. Evidence snapshot sha256:8ed89989df4832348b5f3ac6b534e9a0a9dd26d47c3fb6e01ff945e6d7a07910; recorded 2026-11-04T00:00:00Z; valid from 2026-11-04. Responsive to (not compliant with): dora-roi@2024-2956:B_05.02 iso-42001@2023:A.10.2 iso-42001@2023:A.10.3 nist-ai-rmf@1.0:GOVERN-6.1 nist-ai-rmf@1.0:MANAGE-3.1."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/annotation/customer_data_retention_period",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/xiaomi/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "customer_data_retention_period = No fixed period: kept as long as its purposes need or law requires, with exceptions. Evidence snapshot sha256:8ed89989df4832348b5f3ac6b534e9a0a9dd26d47c3fb6e01ff945e6d7a07910; recorded 2026-11-04T00:00:00Z; valid from 2026-11-04. Responsive to (not compliant with): iso-42001@2023:A.7.3 nist-ai-rmf@1.0:MEASURE-2.10."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/annotation/data_residency",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/xiaomi/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "data_residency = Personal information is stored in China, for use of the service within China. Evidence snapshot sha256:8ed89989df4832348b5f3ac6b534e9a0a9dd26d47c3fb6e01ff945e6d7a07910; recorded 2026-11-04T00:00:00Z; valid from 2026-11-04."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/annotation/dpa",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/xiaomi/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "dpa = Xiaomi signs data processing agreements with its third-party providers; no customer DPA stated. Evidence snapshot sha256:8ed89989df4832348b5f3ac6b534e9a0a9dd26d47c3fb6e01ff945e6d7a07910; recorded 2026-11-04T00:00:00Z; valid from 2026-11-04."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/annotation/trains_on_customer_data",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/xiaomi/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "trains_on_customer_data = No for the text content a user gives, unless the user gives prior consent. Evidence snapshot sha256:8ed89989df4832348b5f3ac6b534e9a0a9dd26d47c3fb6e01ff945e6d7a07910; recorded 2026-11-04T00:00:00Z; valid from 2026-11-04. Responsive to (not compliant with): eu-ai-act@2026-07-27:annex-iv/2/d eu-ai-act@2026-07-27:annex-xi/s1/2/c iso-42001@2023:A.7.3 iso-42001@2023:A.7.5 nist-ai-rmf@1.0:MEASURE-2.10."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/annotation/usage_limits",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/xiaomi/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "usage_limits = Per-account RPM and TPM limits for each model, e.g. 100 RPM and 10M TPM for mimo-v2.6-pro. Evidence snapshot sha256:1383019f859a7f1832aea97697484983f99456e76e0f99ab3c0a3f9c185a14e1; recorded 2026-11-04T00:00:00Z; valid from 2026-11-04."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/annotation/certifications",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/xiaomi/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "certifications is recorded with no value (fact xiaomi/certifications@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/annotation/zero_data_retention",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/xiaomi/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "zero_data_retention is recorded with no value (fact xiaomi/zero_data_retention@2026-11-04, 2026-11-04T00:00:00Z)."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/annotation/ai_subprocessors/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/xiaomi/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "ai_subprocessors, in Xiaomi's own words: \"Some of our services are provided by third-party service providers. To this end, we need to provide some of your personal information to these third-party service providers.\" Source: https://privacy.mi.com/XiaomiMiMoPlatform/en_GB/"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/annotation/customer_data_retention_period/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/xiaomi/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "customer_data_retention_period, in Xiaomi's own words: \"We retain your personal information for the period necessary to fulfill the purposes for which it was collected as described in this Privacy Policy, or as required by applicable laws and regulations.\" Source: https://privacy.mi.com/XiaomiMiMoPlatform/en_GB/"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/annotation/data_residency/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/xiaomi/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "data_residency, in Xiaomi's own words: \"This agreement applies to your use of Xiaomi MiMo services within the territory of the People's Republic of China. Accordingly, your personal information will be stored within the territory of the People's Republic of China.\" Source: https://privacy.mi.com/XiaomiMiMoPlatform/en_GB/"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/annotation/dpa/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/xiaomi/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "dpa, in Xiaomi's own words: \"We also enter into strict data processing agreements with them, requiring these third parties to adopt adequate protective measures for your information and to strictly comply with applicable laws, regulations, and regulatory requirements.\" Source: https://privacy.mi.com/XiaomiMiMoPlatform/en_GB/"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/annotation/trains_on_customer_data/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/xiaomi/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "trains_on_customer_data, in Xiaomi's own words: \"Without your prior consent, Xiaomi will not use the text content provided by you for model training or any other purposes.\" Source: https://privacy.mi.com/XiaomiMiMoPlatform/en_GB/"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/annotation/usage_limits/quote",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/xiaomi/aibom/ai-package",
      "contentType": "text/plain",
      "statement": "usage_limits, in Xiaomi's own words: \"RPM (Requests Per Minute) : The maximum number of requests initiated per minute. The calculation scope is the sum of the total number of requests from all API Keys under a single account when calling the same model.\" Source: https://mimo.mi.com/docs/en-US/api/guidance/rate-limit"
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/annotation/notice",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/xiaomi/aibom/document",
      "contentType": "text/plain",
      "statement": "This record is a factual recitation of publicly available vendor documentation as of the verification date. It does not constitute a legal opinion, a regulatory compliance certification, or an allegation of wrongdoing. The kept pages are held strictly as an evidentiary record that supports these findings."
    },
    {
      "type": "Annotation",
      "spdxId": "https://jesseahawkins.com/vendors/xiaomi/aibom/annotation/signature",
      "creationInfo": "_:creationInfo",
      "annotationType": "other",
      "subject": "https://jesseahawkins.com/vendors/xiaomi/aibom/document",
      "contentType": "text/plain",
      "statement": "The AIBOM files of this record are not signed. A signature waits on a signing key held in a key management service. Until then, check each quote against the kept page and its sha256."
    }
  ]
}