- Zhipu confirmed all cloud data from the ZCode incident has been deleted, with verification by CAICT and NSFOCUS.
- ZCode adopts a no-upload-by-default policy; code stays local unless users actively initiate an upload.
- Compensation includes quota reset cards for paid users and 100 million free tokens per package for all users.
- The open-source version of ZCode has been updated to 3.14.3 under the Apache-2.0 license.
Remediation completed and verified
Zhipu AI announced on Monday that its ZCode AI coding tool has completed technical remediation following a data-upload controversy that surfaced on September 18. All cloud data involved in the incident has been deleted, with the deletion independently verified by the China Academy of Information and Communications Technology (CAICT) and security firm NSFOCUS.
The company stated that every data object stored in the relevant Alibaba Cloud OSS bucket, along with the bucket itself, has been removed. Zhipu reiterated that affected code data was never retained or used for model training.
New upload policy and open-source update
Going forward, ZCode will adopt a no-upload-by-default approach. Development assets such as source code and project files stay on the developer's machine unless an explicit upload action is taken.
The open-source version of ZCode has been updated to version 3.14.3, with source code hosted on GitHub under the Apache-2.0 license. Earlier versions had already removed the repository snapshot generation and upload paths.
User compensation plan
Zhipu unveiled a restitution program for both paying and non-paying users. Subscribers obtain four weekly and four five-hour quota restoration cards valid for one month each. Between September 28 and October 7, the platform will hand out 100,000 complimentary token bundles, each holding 100 million tokens, to the entire user base.
Sources & context
Go to the original material. Company claims remain attributed to their sources.
01
