baidu/Qianfan-OCR

No product-safety style post-market monitoring programme in the EU AI Act sense has been identified for this vendor. The available monitoring surfaces are: periodic financial disclosure to the SEC (Form 20-F, Form 6-K) and to HKEX; the investor relations newsroom at https://ir.baidu.com/press-releases; and Chinese domestic regulatory processes, including the Cyberspace Administration of China approval regime for publicly available generative AI services, under which Baidu's ERNIE Bot was among the first batch of approved services in August 2023. No published incident-reporting channel, model-update changelog, vulnerability disclosure policy or serious-incident process specific to the AI products was located. Absence of located evidence is not evidence of absence; this field should be revisited if any Baidu product enters scope as a deployed system.

Documented and structural limitations relevant to third-party risk assessment: (1) Jurisdiction and transfer. Operations and hosting are in mainland China under PIPL, the Data Security Law and the Cybersecurity Law; no EU data residency option has been identified for the consumer AI products, so any EU personal data would require a GDPR Chapter V transfer assessment. (2) No EU establishment and no EU AI Act authorized representative identified, which is material if any Baidu AI system falls within EU AI Act scope. (3) No enterprise DPA, standard contractual clauses, or SOC 2 / ISO 27001 certification located for the consumer AI product lines. (4) Model opacity: no model cards, training-data documentation or independent evaluation results published for the generative features. (5) IP provenance: generative products grounded in user-uploaded third-party content, notably Baidu Wenku, carry unresolved copyright exposure, and the Baidu Wenku upload model has been the subject of copyright litigation in China. (6) Language: interfaces and most documentation are Simplified Chinese only, which is an operational and reviewability constraint for a Netherlands-based deployer. (7) Product volatility: the AI line changes rapidly (multiple GenFlow major versions between April 2025 and Q1 2026, a Kunlunxin spin-off and separate listing in progress), so records against this vendor go stale quickly.