Data security & privacy

Qwen Cloud is designed to protect your data at every layer — from API requests to model inference. This page describes the key security measures in place.

​

Zero data retention

Qwen Cloud does not use your API inputs or outputs to train or improve models. See Zero data retention for details on data handling during inference.

​

Encryption

​

API key security

API keys authenticate every request to Qwen Cloud. Follow these practices to keep your keys safe:

• Never hardcode keys in source code or commit them to version control. Use environment variables or a secrets manager.
• Use separate keys for development and production environments.
• Rotate keys regularly. You can create new keys and delete old ones from the API Keys page.
• Restrict access by creating keys in specific workspaces with appropriate permissions.

For detailed API key management instructions, see API keys.

​

Content moderation

All API requests pass through automatic content moderation that screens both inputs and outputs for harmful, illegal, or inappropriate content.

​

Responsible AI practices

As a developer building on Qwen Cloud, you share responsibility for the safety and security of your application:

• Implement input validation before passing user content to the API.
• Set appropriate max_tokens limits for your use case.
• Add rate limiting at the application layer to prevent abuse.
• Monitor both inputs and outputs for content safety using Qwen Cloud's built-in content moderation.

​

Learn more

• Zero data retention: Data handling during inference.
• Audit & access Logs: Track API usage for compliance.