Zhipu said it has completed a security overhaul of its ZCode AI coding tool after users raised concerns that the software could upload project data to a cloud server without clear consent. ZCode version 3.14.0 removed the RepoWiki feature and the paths used to generate and upload local repository snapshots, while the source code has been released on GitHub under the Apache-2.0 license.
Zhipu said checks by the China Academy of Information and Communications Technology found no data in the relevant Alibaba Cloud OSS bucket, while NSFOCUS confirmed that the bucket and its stored objects had been deleted. The company said the data was not used for model training, although the full audit reports and the status of historical access or decryption remain undisclosed. [CNR, in Chinese]