LLM API Compliance
Providers / xAI (Grok API)

xAI (Grok API)

Headquarters: United States. Trust center or security page: docs.x.ai. Checked 2026-10-29. API prices: price tracker.

Certifications and attestations

NameScopeSource
SOC 2 Type 2This servicedocs.x.ai

Reports are usually available under NDA from the trust center. A company-wide certificate doesn't always cover every AI product; check the report's scope.

HIPAA: BAA on request

“To inquire about a Business Associate Agreement (BAA), please complete our BAA Questionnaire.”

Source: docs.x.ai

Zero data retention: Self-serve setting

“a team admin can turn it on or off directly from the xAI Console”

Source: docs.x.ai

Training on API data: Not used for training by default

“never trains on your API inputs or outputs without your explicit permission”

Source: docs.x.ai

Default retention: 30 days for abuse audits

“it is automatically deleted after 30 days.”

Source: docs.x.ai

EU data residency: unknown

Not stated on the models/pricing page.

From the BranoLabs price tracker provider registry.

Something changed or wrong? Use the bug link in the footer. Back to all providers.