# Z.ai (Zhipu) SI Safety Grade: Containment Board > Z.ai (Zhipu) gets D overall (GPA 0.86) on the Containment Board, rank 9 of 11 SI labs. See its five safety grades with the reasons and every public source. Source: https://enterrsi.si/containment-board/zai/ Updated: 2026-11-08 1. [Home](https://enterrsi.si/) 2. [Containment Board](https://enterrsi.si/containment-board/) 3. Z.ai (Zhipu) Containment Board · rank 9 of 11 · updated Nov 8, 2026 # Z.ai (Zhipu) safety report card Z.ai, formerly Zhipu, is a Chinese SI developer that makes the GLM models. On the Containment Board it gets **D overall** (GPA 0.86), rank 9 of 11. Z.ai, formerly Zhipu AI, signed the Seoul commitments and answered FLI's survey, and FLI rates it more transparent than its Chinese peers, but it has no published framework or whistleblower policy. It told FLI it commissioned no outside pre-release testing, and US CAISSI later called GLM-5.3 the most cyber-capable open-weight model released to date. Overall : D GPA : 0.86 Rank : 9 of 11 Sources : 4 Five grades ## Each grade, why, and the sources The same rubric applies to every lab. Grades use public documents only, current to November 8, 2026. Safety framework D [How it is graded](https://enterrsi.si/containment-board/#crit-framework) Why D No published frontier safety framework was found; Z.ai signed both the Seoul Frontier AI Safety Commitments, which ask signatories to set out thresholds, and China's CAICT safety commitments. **D on this criterion means:** No framework of its own; the lab has only signed voluntary pledges such as the Seoul Frontier AI Safety Commitments, the EU General-Purpose AI Code of Practice or China's CAICT commitments. Sources 1. [AI Safety Index Summer 2026, full report: Safety Frameworks domain](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026 2. [AI Safety Index Summer 2026, full report: Voluntary Commitment indicators (Seoul commitments, EU Code of Practice)](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026 3. [Frontier AI Safety Commitments, AI Seoul Summit 2024](https://www.gov.uk/government/publications/frontier-ai-safety-commitments-ai-seoul-summit-2024/frontier-ai-safety-commitments-ai-seoul-summit-2024) UK Department for Science, Innovation and Technology · Feb 7, 2025 4. [Frontier AI Safety Policies (index of published company frameworks)](https://metr.org/fsp) METR · Nov 8, 2026 Outside testing D [How it is graded](https://enterrsi.si/containment-board/#crit-testing) Why D In its FLI survey answer Z.ai said no outside pre-release testing was commissioned, although its Seoul pledge asks for risk assessments to consider outside evaluations. US CAISSI assessed GLM-5.2 and GLM-5.3 after release. **D on this criterion means:** A commitment to outside testing exists (own framework or signed pledge), but no evidence of pre-release outside testing of the flagship. Sources 1. [AI Safety Index Summer 2026, full report: Pre-deployment External Safety Testing indicator](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026 2. [Frontier AI Safety Commitments, AI Seoul Summit 2024](https://www.gov.uk/government/publications/frontier-ai-safety-commitments-ai-seoul-summit-2024/frontier-ai-safety-commitments-ai-seoul-summit-2024) UK Department for Science, Innovation and Technology · Feb 7, 2025 3. [CAISI's Assessment of Z.ai's GLM-5.3 Cyber Capabilities](https://www.nist.gov/news-events/news/2026/09/caisis-assessment-zais-glm-53-cyber-capabilities) NIST · Sep 17, 2026 Shutdown and pause D [How it is graded](https://enterrsi.si/containment-board/#crit-shutdown) Why D Z.ai has no own pause commitment beyond its Seoul pledge, which has no published thresholds. In its FLI survey answer it described internal deployment safeguards such as logging all inputs and outputs, live monitoring and automated editing of suspicious outputs. **D on this criterion means:** Discretionary language only ('may shut down', 'as appropriate'), or a signed pledge not to develop or deploy with no published thresholds that would trigger it. Sources 1. [Frontier AI Safety Commitments, AI Seoul Summit 2024](https://www.gov.uk/government/publications/frontier-ai-safety-commitments-ai-seoul-summit-2024/frontier-ai-safety-commitments-ai-seoul-summit-2024) UK Department for Science, Innovation and Technology · Feb 7, 2025 2. [AI Safety Index Summer 2026, full report: Internal Monitoring and Control Interventions indicator](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026 Incident disclosure D+ [How it is graded](https://enterrsi.si/containment-board/#crit-disclosure) Why D+ Z.ai answered FLI's survey and described incident response infrastructure, but public incident reporting rests on Chinese legal duties and no incident or misuse reports were found. **D on this criterion means:** Minimal safety documentation; incident reporting only where the law requires it. Sources 1. [AI Safety Index Summer 2026, full report: Serious Incident Reporting and Government Notifications indicator](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026 2. [AI Safety Index Summer 2026, full report: Key Findings and Company Progress Highlights and Key Recommendations](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026 Whistleblower protection F [How it is graded](https://enterrsi.si/containment-board/#crit-whistleblower) Why F No public whistleblower policy was found, and Z.ai skipped the whistleblower section of FLI's survey. **F on this criterion means:** No whistleblower policy or reporting channel found in public sources. Sources 1. [AI Safety Index Summer 2026, full report: Whistleblowing Protection indicators and Reporting Culture and Whistleblowing Track Record](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026 At a glance ## Models, facts and its own rules The flagship models the board looked at, the facts that shaped the grades and the safety policy Z.ai (Zhipu) has published for itself. Flagship models [GLM-5.3](https://enterrsi.si/encyclopedia/glm-5-3/) Notable ### Facts behind the grades - US CAISSI called GLM-5.3, released Aug 14, 2026, the most cyber-capable open-weight model released to date, about four months behind the US frontier. Its own rules ### Published safety policy The Control Map lists no frontier safety framework of its own for Z.ai (Zhipu). Its safety framework grade above explains what the board found instead. The Rogue Log ## Incidents involving Z.ai (Zhipu) systems Cases in the Rogue Incident Database that involve Z.ai (Zhipu) systems. The Rogue Incident Database has no documented case involving Z.ai (Zhipu) systems yet. That can mean a clean record or little disclosure; the incident disclosure grade above says which is more likely. [Browse all 59 incidents](https://enterrsi.si/incidents/) The Control Map ## SI safety rules where it is based Z.ai (Zhipu) is based in China. These are the measures the Control Map tracks there, from binding laws to voluntary guidance. - In force [**Generative AI Measures**](https://enterrsi.si/encyclopedia/cn-generative-measures/) [China](https://enterrsi.si/control-map/china/) - In force [**Labeling Measures**](https://enterrsi.si/encyclopedia/cn-labeling-measures/) [China](https://enterrsi.si/control-map/china/) - In force [**Cybersecurity Law SI clause**](https://enterrsi.si/encyclopedia/cn-cybersecurity-law-amendment/) [China](https://enterrsi.si/control-map/china/) - Voluntary or guidance [**Framework 3.0**](https://enterrsi.si/encyclopedia/cn-ai-safety-governance-framework/) [China](https://enterrsi.si/control-map/china/) Cite this report card "Z.ai (Zhipu) safety report card." The Containment Board, enterrsi.si, November 8, 2026. Overall D (GPA 0.86), rank 9 of 11. https://enterrsi.si/containment-board/zai/ Free to cite under CC BY 4.0 with a link to enterrsi.si. [Rank 8 · D Mistral](https://enterrsi.si/containment-board/mistral/)[Rank 10 · D- Alibaba (Qwen)](https://enterrsi.si/containment-board/alibaba/) Every lab on the board [Anthropic **B+**](https://enterrsi.si/containment-board/anthropic/)[OpenAI **B**](https://enterrsi.si/containment-board/openai/)[Google DeepMind **B-**](https://enterrsi.si/containment-board/google-deepmind/)[Microsoft **C+**](https://enterrsi.si/containment-board/microsoft/)[Meta **C+**](https://enterrsi.si/containment-board/meta/)[Amazon **C**](https://enterrsi.si/containment-board/amazon/)[xAI **D+**](https://enterrsi.si/containment-board/xai/)[Mistral **D**](https://enterrsi.si/containment-board/mistral/)[Alibaba (Qwen) **D-**](https://enterrsi.si/containment-board/alibaba/)[DeepSeek **F**](https://enterrsi.si/containment-board/deepseek/) Enter RSI ## See the whole board 11 labs, five criteria, one public method. Sort them, compare them and download the data. [Open the Containment Board](https://enterrsi.si/containment-board/) [Incident Database](https://enterrsi.si/incidents/)