Zhipu says ZCode removed repository-upload paths after data controversy
Zhipu has completed a security overhaul of its ZCode AI coding tool. This follows user concerns that the software could upload project data without clear consent. ZCode version 3.14.0 removed the RepoWiki feature and local repository snapshot paths. The source code is now on GitHub under an Apache-2.0 license. Checks by the China Academy of Information and Communications Technology found no data in the relevant Alibaba Cloud OSS bucket.
Zhipu's quick fix for ZCode is a tactical win, but the underlying issue remains. The company removed data upload paths and released source code under Apache-2.0. This addresses immediate user trust concerns. However, the full audit reports and historical access status are still undisclosed. This lack of transparency is a problem.
For Chinese AI developers, this incident shows the tension between rapid innovation and data privacy. Zhipu avoided a larger scandal by acting fast. Other Chinese AI firms must now scrutinize their own data handling. Regulatory scrutiny in China will likely increase for similar coding tools. This creates a new compliance burden for startups.
The test for Zhipu is whether it can regain developer trust. Releasing source code is a good first step. But the company needs to publish a comprehensive audit of past data practices. Without this, developers will remain wary of ZCode and other Zhipu offerings. This is a crucial step for its long-term market position.
Share this article
Related reading
6 stories
China tech faces fresh scrutiny as US blacklist bill introduced, Lenovo case emerges
China tech faces fresh scrutiny as US blacklist bill introduced, Lenovo case emerges.
Mastercard Launches AI Assistant to Simplify Card Benefits
China moves to set global standards for brain-computer interface technology
Visa Tests AI-Powered Business Payments, Introduces New Fraud Controls
China’s Unitree unveils ‘guardian’ robot that can disarm attackers, lift cars
