Our take
Z.AI serves its own GLM family, and its offers span a wide range of rates, so you can pick a tier by budget without leaving the provider. It states that it does not train on prompts and offers a zero-retention option, but no independent security attestation or European hosting is verified in our data.
Use it for cost-sensitive work where the cheapest GLM tier is enough, or where a no-training-on-prompts commitment and a zero-retention option are what the decision turns on. Compare its own tiers against each other before you commit, since the spread between them is wide. Skip it if you need a third-party security audit, confirmed European processing, or a disclosed home jurisdiction.
- It states that it does not train on prompts, which answers the usual objection to sending proprietary text to a host.
- A zero-retention option is available, so a data-handling constraint has a route through the service rather than around it.
- Its own GLM tiers run from a cheap Flash option up to a far pricier flagship, so budget and capability can be traded off within one provider.
- No independent security attestation is verified in our data, so a reader who needs a third-party audit of its controls cannot confirm one here.
- European hosting is unverified in our data, so a data-residency requirement cannot be confirmed from what we list.
- Its headquarters country is not disclosed, which leaves the jurisdiction behind the service unplaced.
Point your tools here
We have not recorded what a router needs for Z.AI yet — no base URL and no docs link on file. That is our gap, not a sign Z.AI has no API; its own documentation is the place to look until we close it.
Privacy & data handling
These answers cover requests sent to Z.AI through OpenRouter, as OpenRouter records them, last read 59 min ago. For Z.AI's own API we hold no answer: check its terms. SOC 2 and the data processing agreement below are hand-checked, not part of that sync.
Prompt retention: none.