Enterprise Terms of Service changed xAI, Jul 8, 2026
xAI · Jul 8, 2026 · 2 added, 2 removed · found in an Internet Archive capture
- Added: Privacy. Customer acknowledges that if Customer, Permitted Users, or End-Users submit to the Services any data that includes "personal data" or "personal information" (as those terms are defined under applicable privacy laws), xAI will process such data as a processor on Customer's behalf, and xAI's Data Processing Addendum (as it may be updated from time to time) (" DPA "), which is incorporated herein by reference, shall automatically apply. In addition, Customer represents and warrants that it will not intentionally submit, and will use reasonable efforts to prevent Permitted Users and End-Users from submitting any "protected health information" as defined under the HIPAA Privacy Rule (45 C.F.R. § 160.103) unless Customer has first entered into a Business Associate Agreement or Amendment (" BAA ") with xAI that amends this Agreement and also uses xAI's ZDR-Enabled API to submit that data. Customer will ensure that use of the Services, Bundled Services, any Additional Bundled Services, and User Content complies with Customer privacy policies and all applicable local, state, federal and international laws, regulations and conventions, including, without limitation, those related to data privacy, international communications, transfer of technical or personal data, and export and sanctions laws. Customer is solely responsible for determining the legality of submitting any Personal Data (as defined in the DPA) for processing to the Services; for obtaining all necessary consents, rights, and authorizations for such submissions; and for any consequences of such submissions.
- Added: Zero Data Retention . Customer represents and warrants that it will not intentionally submit, and will use reasonable efforts to prevent Permitted Users and End Users from submitting, any Personal Data to the Services except through xAI's ZDR-Enabled API. Customer acknowledges and agrees that: (i) when using ZDR, only Customer (and not xAI) will retain or have access to such Personal Data; (ii) as a result, xAI will lack the information necessary to fulfill many obligations typically imposed on a subprocessor under a data processing agreement; and (iii) Customer is solely responsible for ensuring that all Personal Data is processed exclusively through the ZDR-Enabled API. xAI shall have no responsibility or liability for any processing of Personal Data that occurs outside the ZDR-Enabled API. Customer's failure to process Personal Data exclusively through the ZDR-Enabled API as required hereunder shall constitute a material breach of this Agreement. Customer further acknowledges and agrees that, when using xAI's ZDR-Enabled API, xAI will not retain any User Content (including Personal Data) after processing is complete. This includes any User Content that may be needed to respond to requests from governmental authorities, auditors, data subjects, or for any other compliance or audit purpose. Customer is solely responsible for maintaining its own copies of any such User Content if retention is required
- Removed: Privacy. Customer acknowledges that if Customer, Permitted Users, or End-Users submit to the Services any data that includes, "personal data" or "personal information" (as those terms are defined under applicable privacy laws), xAI will process such data as a processor on Customer's behalf, and xAI's Data Processing Addendum (as it may be updated from time to time) (" DPA "), which is incorporated herein by reference, shall automatically apply. In addition, Customer represents and warrants that it will not intentionally submit, and will use reasonable efforts to prevent Permitted Users and End-Users from submitting any "protected health information" as defined under the HIPAA Privacy Rule (45 C.F.R. § 160.103) unless Customer has first entered into a Business Associate Agreement or Amendment (" BAA ") with xAI that amends this Agreement and also uses xAI's ZDR-Enabled API to submit that data. Customer will ensure that use of the Services, Bundled Services, any Additional Bundled Services and User Content complies with Customer privacy policies and all applicable local, state, federal and international laws, regulations and conventions, including, without limitation, those related to data privacy, international communications, transfer of technical or personal data, and export and sanctions laws. Customer is solely responsible for determining the legality of submitting any Personal Data (as defined in the DPA) for processing to the Services; for obtaining all necessary consents, rights, and authorizations for such submissions; and for any consequences of such submissions.
- Removed: Zero Data Retention . Customer represents and warrants that it will not intentionally submit, and will use reasonable efforts to prevent Permitted Users and End Users from submitting, any Personal Data to the Services except through xAI's ZDR-Enabled API. Customer acknowledges and agrees that: (i) when using ZDR, only Customer (and not xAI) will retain or have access to such Personal Data; (ii) as a result , xAI will lack the information necessary to fulfill many obligations typically imposed on a subprocessor under a data processing agreement; and (iii) Customer is solely responsible for ensuring that all Personal Data is processed exclusively through the ZDR-Enabled API. xAI shall have no responsibility or liability for any processing of Personal Data that occurs outside the ZDR-Enabled API. Customer's failure to process Personal Data exclusively through the ZDR-Enabled API as required hereunder shall constitute a material breach of this Agreement. Customer further acknowledges and agrees that, when using xAI's ZDR-Enabled API, xAI will not retain any User Content (including Personal Data) after processing is complete. This includes any User Content that may be needed to respond to requests from governmental authorities, auditors, data subjects, or for any other compliance or audit purpose. Customer is solely responsible for maintaining its own copies of any such User Content if retention is required
About this change
- Page
- x.ai/legal/terms-of-service-enterprise
- Kind
- Terms
- Text hash
- 9a8550b27c5f to 0dedee70422b
- Dated by
- the first Internet Archive capture sampled that shows the new text; the change happened on or before this date