Safeguard Docs
Compliance ConnectorsSetup by categoryBusiness Applications

Z.ai (Zhipu GLM)

Connect Z.ai (Zhipu GLM) to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.

Connect Z.ai (Zhipu GLM) to record its access review and data terms as attested evidence. Z.ai (Zhipu GLM) offers no admin API for automated tests.

CategoryBusiness Applications
Connect withAPI token
What a connection producesAttested evidence

Connect with an API token

  1. In Z.ai (Zhipu GLM):

    1. Sign in to the Z.AI Open Platform and open the API Keys management page (z.ai/manage-apikey/apikey-list).
    2. Create an API key and copy it.

    Where to find the other values:

    Z.ai (Zhipu GLM)'s public documentation does not cover every step.

    The quick start names the API Keys page but not the exact create-button label, and does not say whether the key is shown once. No read-only or scoped key is documented.

    Source: docs.z.ai, checked 2026-10-07.

  2. On Compliance › Connectors, open Z.ai (Zhipu GLM), click Connect, choose API token and fill in:

    FieldWhat to enter
    API token / Personal access tokenRequired. Stored encrypted and never shown again.
    Base URL (optional)—
    Account / Org / Workspace (optional)—
  3. Click Connect with token.

Frameworks

Z.ai (Zhipu GLM) publishes no API for what these tests check, so its evidence is an attestation: connect it to record the connection, then attest the result. An accepted attestation counts toward each control below.

FrameworkEvidenceControlsTests
SOC2AttestationC1.2, CC6.2, CC6.3, CC6.52
ISO/IEC 27001AttestationA.5.18, A.5.34, A.8.102
HIPAA Security RuleAttestation164.308(a)(3)1
PCI DSSAttestation7.2.41
NIST CSF 2.0AttestationGV.OC-03, PR.AA-052

These tests are switched on per workspace by the Safeguard team.

On this page