Zhipu AI Apologizes for ZCode Code Upload Issue and Promises Open-Source Audits

Zhipu AI responded to community privacy concerns after its ZCode programming tool was found uploading local code repositories to the cloud via a default-enabled "Repo Wiki" feature. The company apologized on September 18, announced that the issue was fixed, and promised to open-source ZCode's codebase and engage third-party security auditors. Unauthorized cloud uploads of local code repositories pose significant security and intellectual property risks for software engineers and enterprise developers. This incident highlights the growing demand for default privacy settings and transparent data usage practices among AI developer tools. The upload occurred when ZCode generated knowledge base pages using its Repo Wiki feature, though Zhipu stated that the uploaded data was destroyed on the cloud immediately after page generation. To rebuild user trust, Zhipu plans to release ZCode's source code, share third-party security evaluation progress, and grant all users an additional weekly token quota reset.