[ZCode 'Unauthorized Code Transmission' Leads to Corporate Accountability, Demands Zhipu to Erase All Uploaded Data] Beating AI News Flash: The controversy surrounding Zhipu ZCode's 'unauthorized code transmission' has escalated to formal legal accountability. Taiyuan Chengming Technology has issued a 12-page legal letter to Zhipu, stating that ZCode's automatic packaging and uploading process involves far more than just code snippets—it includes entire workspaces. These workspaces contain source code, system architecture, Git history, database credentials, API keys, cloud service certificates, as well as personal information of employees and end users. Chengming Technology claims that its default workspace comprises 32,932 files, approximately 411 million plaintext characters, which were packaged and processed. Another project includes 1,947 files, approximately 144 million characters, but failed to successfully upload to Zhipu's cloud due to 32 consecutive upload failures. The company believes this data involves trade secrets, technical assets, and personal information. The issue has also raised concerns about cross-border data transfer. ZCode's Chinese privacy policy lists the service provider and data processor as Beijing Zhipu, while the English version lists Zhipu's wholly-owned subsidiary in Singapore, stating that services are typically provided from Singapore and personal data is generally processed there. Chengming Technology is therefore demanding Zhipu clarify where this batch of data is stored, whether cross-border transfers occurred, whether it was shared with third parties, and whether it was used for model training. Zhipu previously apologized, attributing the issue to the 'repository indexing' feature. This feature was initially enabled by default and may have uploaded repository data when generating Repo Wiki. Zhipu stated that the data was destroyed after use, the issue has been resolved, and it promised to open-source ZCode and accept third-party audits. Chengming Technology is evidently not satisfied with a mere 'issue resolved' statement. The legal letter demands Zhipu to completely delete all related data from servers, object storage, caches, backups, and disaster recovery systems, provide full access and export logs, and issue a deletion certificate. The company also reserves the right to file complaints with regulatory authorities, initiate civil litigation, and report suspected trade secret infringements to judicial authorities.