OpenRouter
What OpenRouter keeps, for how long, whether it trains on it, and what rights you grant, for OpenRouter API and chat (self-serve accounts), OpenRouter Business / Enterprise (organizations under the DPA). Each answer quotes OpenRouter's own policy.
- OpenRouter API and chat (self-serve accounts)
- OpenRouter Business / Enterprise (organizations under the DPA)
- Notes
- Open questions
- Documents
OpenRouter API and chat (self-serve accounts) API
- Default retention How long prompts and chats are kept
-
Stated OpenRouter stores no prompts or responses by default, only request metadata (retention period not stated). Opted-in Input & Output Logging keeps content at least 3 months, possibly longer.
What the policies say (4 quotes)
"OpenRouter does not store your prompts or responses, *unless* you opt in to one or both of the following, or content is flagged as potential CSAM:"
Data Collectionopenrouter.aicaptured 2026-11-08"OpenRouter does store metadata (e.g. number of prompt and completion tokens, latency, etc) for each request."
Data Collectionopenrouter.aicaptured 2026-11-08"**Retention**: Data is retained for a minimum of 3 months, and may be retained beyond 3 months at OpenRouter’s discretion unless you request deletion."
Input & Output Loggingopenrouter.aicaptured 2026-11-08"Uploaded Files are retained by us until you delete them or close your account, subject to the exceptions described below."
Privacy Policyopenrouter.aicaptured 2026-11-08 - After you delete How long until it is gone
-
Stated You request account or log deletion by email. No timeframe is given for individual users. The DPA, which applies to organizational/commercial users, says 30 business days, backups included.
What the policies say (4 quotes)
"When your account is deleted, all associated personal data is deleted, unless we are required to maintain it for regulatory and compliance purposes or for a legal or business necessity."
Privacy Policyopenrouter.aicaptured 2026-11-08"Account owners can request deletion of their stored data at any time by contacting [support@openrouter.ai](mailto:support@openrouter.ai)."
Input & Output Loggingopenrouter.aicaptured 2026-11-08"If you are part of and represent an organization in entering into these Terms or use the Service for commercial, for-profit purposes, please read the OpenRouter [Data Processing Agreement](https://openrouter.ai/data-processing-agreement) ("**DPA**") relating to our processing of your Personal Data (as defined in the DPA)."
Terms of Serviceopenrouter.aicaptured 2026-11-08"OpenRouter deletes Customer Data from the datastores and backups within 30 business days of request and supplies notification of completion via email."
Data Processing Agreementopenrouter.aicaptured 2026-11-08 - Kept longer when Safety flags, legal holds, backups
-
Stated Exceptions: CSAM-flagged content, Safety Retention endpoints (abuse-only retention by OpenRouter or provider), temporary batch storage, legal preservation. OpenRouter states no durations; Google Vertex: up to 90 days.
What the policies say (5 quotes)
"Content flagged as potential CSAM may be retained for human review, reporting, and preservation where required by law."
Data Collectionopenrouter.aicaptured 2026-11-08"Requests to Safety Retention endpoints are the exception: OpenRouter or the provider may retain prompts and responses from any request, only to prevent abuse, and not for training."
Data Collectionopenrouter.aicaptured 2026-11-08"Certain features of the Service, such as batch or other large-volume request processing, require OpenRouter to temporarily store your User Content in order to process, route, and fulfill your request"
Terms of Serviceopenrouter.aicaptured 2026-11-08"With Safety Retention, Google doesn’t retain prompts by default, but it may retain prompts that its safety classifiers flag, for up to 90 days, for abuse monitoring."
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08"We will preserve and disclose any and all information to law enforcement agencies or others if required to do so by law"
Privacy Policyopenrouter.aicaptured 2026-11-08 - Zero data retention Whether it exists and who can get it
-
Stated Any account can enforce ZDR globally, per model group, per guardrail, or per request. It limits routing to about 1,100 listed endpoints; self-serve default also allows Safety Retention endpoints.
What the policies say (5 quotes)
"OpenRouter has [privacy settings](https://openrouter.ai/settings/privacy) that, when enabled, only allow you to route to endpoints that have a Zero Data Retention policy. You can enforce ZDR globally, per model group, per guardrail, or per request."
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08"If you haven’t chosen, self-serve accounts allow Safety Retention and enterprise accounts use ZDR only."
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08"The following endpoints are eligible when ZDR is enforced. Note that this list is also available programmatically via [https://openrouter.ai/api/v1/endpoints/zdr](https://openrouter.ai/api/v1/endpoints/zdr)."
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08"OpenRouter has taken the stance that in-memory caching of prompts is *not* considered “retaining” data, and we therefore allow endpoints/models with implicit caching to be hit when a ZDR routing policy is in effect."
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08"ZDR enforcement only applies to provider routing for inference requests. It does not apply to [plugins](/docs/guides/features/plugins) and tools you choose to enable"
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08 - Trains on your data By default
-
Stated OpenRouter does not train on your inputs or outputs. Letting it use them to improve the product is opt-in, for a 1% discount. Upstream providers may train under their policies.
What the policies say (4 quotes)
"**OpenRouter does not use your Inputs or Outputs for model training.**"
Privacy Policyopenrouter.aicaptured 2026-11-08"**OpenRouter Use of Inputs/Outputs:** Allow OpenRouter to use your prompt and completion data to improve the product. In exchange, you receive a 1% discount on all model usage. Off by default."
Data Collectionopenrouter.aicaptured 2026-11-08"**Some Model Providers may use your Inputs and Outputs for model training or improvement.**"
Privacy Policyopenrouter.aicaptured 2026-11-08"Provide, analyze, and maintain our Service, and where applicable, for Model training and improvement by Model Providers. The legal basis is to perform a contract with you."
Privacy Policyopenrouter.aicaptured 2026-11-08 - Opting out How, and what it doesn't cover
-
Stated Account settings (paid and free models separately) can block routing to training providers; default not stated. This relies on provider-stated policies; OpenRouter can't control training after data reaches a provider.
What the policies say (5 quotes)
"On your account settings page, you can set whether you would like to allow routing to providers that may train on your data (according to their own policies). There are separate settings for paid and free models."
Provider Loggingopenrouter.aicaptured 2026-11-08"If you opt out of training in your account settings, OpenRouter will not route to providers that train. This setting has no bearing on OpenRouter’s own policies and what we do with your prompts."
Provider Loggingopenrouter.aicaptured 2026-11-08"OpenRouter cannot control Model Provider-side training once user data is transmitted to a training-permitted Model Provider."
Privacy Policyopenrouter.aicaptured 2026-11-08"If OpenRouter is not able to establish or ascertain a clear policy for a provider or endpoint, we take a conservative stance and assume that the endpoint both retains and trains on data and mark it as such."
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08"OpenRouter strives to accurately represent the status of prompt logging and training for each Model on our Site. However, OpenRouter is not liable for errors or misrepresentations made in any Model Terms."
Terms of Serviceopenrouter.aicaptured 2026-11-08 - Human review Whether people read conversations
-
Stated People review CSAM-flagged content. Staff access uploaded files only for violations, legal process, or support. OpenRouter says it doesn't access opted-in logs, though it may re-identify stored inputs to debug.
What the policies say (4 quotes)
"Content flagged as potential CSAM may be retained for human review, reporting, and preservation where required by law."
Data Collectionopenrouter.aicaptured 2026-11-08"our personnel do not access the content of Uploaded Files except as necessary to investigate a suspected violation of our Terms of Service, respond to legal process, or provide support at your request."
Privacy Policyopenrouter.aicaptured 2026-11-08"**Privacy**: OpenRouter does not access or use your prompt and response data logged with this feature for model training, analytics, or any other purpose."
Input & Output Loggingopenrouter.aicaptured 2026-11-08"However, for purposes of de-bugging, we may re-identify your user ID with any stored Inputs."
Privacy Policyopenrouter.aicaptured 2026-11-08 - Memory Remembered facts and profiles
-
Not stated The captured policies describe no persistent memory or user-profile feature, and they don't cover chat-history storage in the chat interface.
- Connected apps Email, calendar, drive
-
Not stated The captured policies don't describe connecting email, calendar, or drive accounts.
- Agent actions Actions taken, browsing, credentials
-
Stated No agent product is described. Server tools and plugins (web search, sandboxes) follow the third-party services' policies and are outside ZDR. Storage of BYOK provider keys isn't described.
What the policies say (2 quotes)
"These policies cover model providers. Server tools and plugins that call third-party services, such as search engines and sandboxes, follow those services’ policies."
Provider Loggingopenrouter.aicaptured 2026-11-08"These may be operated by third-party services with their own data retention policies."
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08 - Your inputs Who owns them
-
Stated You keep copyright and other rights in your inputs.
What the policy says
"You retain copyright and any other proprietary rights that you may hold in the Input."
Terms of Serviceopenrouter.aicaptured 2026-11-08 - Outputs Who owns them
-
Stated OpenRouter doesn't assign output ownership. Each model provider's own terms decide it.
What the policy says
"Your ownership rights in the Output are set forth in the Model Terms for each Model you use."
Terms of Serviceopenrouter.aicaptured 2026-11-08 - License you grant Scope, and whether it is perpetual
-
Stated Base license covers running the Service. Opting into prompt logging adds a perpetual, irrevocable license, including selling anonymized content. Everyone grants a perpetual anonymized-inputs license for metrics. Section 6 survives.
What the policies say (5 quotes)
"you hereby grant to OpenRouter a non-exclusive, transferable, worldwide, royalty-free license, with the right to sublicense, to use, host, cache, store, reproduce, transmit, publicly display, publicly perform, publish, distribute and modify (for formatting purposes only), your User Content solely in connection with operating and providing the Service"
Terms of Serviceopenrouter.aicaptured 2026-11-08"If you have opted into prompt logging in your account settings, chat logging is also automatically enabled, and you grant OpenRouter a worldwide, perpetual, irrevocable, non-exclusive, royalty-free, fully paid right and license (with the right to sublicense)"
Terms of Serviceopenrouter.aicaptured 2026-11-08"(3) license or sell your User Content in anonymized form, where your User Content is not associated with you or your account."
Terms of Serviceopenrouter.aicaptured 2026-11-08"In using the Service, you grant to OpenRouter a worldwide, perpetual, irrevocable, non-exclusive, royalty-free, fully paid right and license (with the right to sublicense) to use, host, reproduce, and prepare derivative works of, your Inputs in anonymized form, solely for tracking and sharing user metrics on the Site"
Terms of Serviceopenrouter.aicaptured 2026-11-08"Upon termination of these Terms, Sections 2, 4, 6, and 10 through 21, along with the Privacy Policy, Data Processing Agreement and any other accompanying agreements, will survive."
Terms of Serviceopenrouter.aicaptured 2026-11-08 - Sharing Model providers, subprocessors, ads
-
Stated Prompts go to the chosen provider, which may keep or train on them. OpenRouter says it never sold prompt data. Uses targeted ads and analytics; shares de-identified inputs with consent.
What the policies say (7 quotes)
"Model Providers process your Inputs to generate Outputs and may, depending on their own terms and data practices, retain and use your Inputs and Outputs for their own purposes, such as model training and improvement."
Privacy Policyopenrouter.aicaptured 2026-11-08"OpenRouter has never sold or licensed prompt data."
Data Collectionopenrouter.aicaptured 2026-11-08"We do not "sell" your personal data as that term is defined by applicable laws and regulations."
Privacy Policyopenrouter.aicaptured 2026-11-08"With your consent, we may disclose Inputs in aggregated, de-identified form, where those Inputs are disassociated from your user ID, in connection with a contractual relationship with corporate partners."
Privacy Policyopenrouter.aicaptured 2026-11-08"Delivering interest-based ads (also known as personalized ads or targeted ads)."
Privacy Policyopenrouter.aicaptured 2026-11-08"In collecting clickstream data, we use PostHog, a web and products analytics platform that may also utilize session replay features."
Privacy Policyopenrouter.aicaptured 2026-11-08"Vendors, service providers, and affiliates to process in accordance with our instructions, including to Model Providers"
Privacy Policyopenrouter.aicaptured 2026-11-08 - Where data lives Regions and residency
-
Stated Data may go to US servers or elsewhere outside the EEA/UK. Opted-in logs sit in Google Cloud Storage. EU/US in-region routing requires a Business or Enterprise plan.
What the policies say (3 quotes)
"your personal data may be transferred to our servers in the US, or to other countries outside the European Economic Area"
Privacy Policyopenrouter.aicaptured 2026-11-08"**Storage**: Prompt and response data is stored in an isolated Google Cloud Storage project with separate access controls."
Input & Output Loggingopenrouter.aicaptured 2026-11-08"On the Business and Enterprise plans, OpenRouter supports in-region routing in the EU and US."
Provider Loggingopenrouter.aicaptured 2026-11-08 - Enterprise controls Retention settings, DPA, SSO
-
Stated Organization admins set logging, ZDR, and training settings for members, apply guardrails per key or member, and lock which keys are logged. They see all logged content.
What the policies say (4 quotes)
"Authorized Users may only use the Service as configured by the Admin User, with such configurations which may include, without limitation, enabling prompt logging, chat logging, zero data retention, model training, and other settings."
Terms of Serviceopenrouter.aicaptured 2026-11-08"This lets you apply different ZDR policies to different API keys or organization members."
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08"For organizations, admins can lock these filters so members cannot modify them."
Input & Output Loggingopenrouter.aicaptured 2026-11-08"For organization accounts, org admins can view stored prompt and response content for every request in the organization."
Input & Output Loggingopenrouter.aicaptured 2026-11-08
OpenRouter Business / Enterprise (organizations under the DPA) Enterprise
- Default retention How long prompts and chats are kept
-
Stated Under the DPA, inputs and outputs are deleted promptly after the output is generated, unless the customer opted into prompt/chat logging. Other personal data is kept as long as necessary.
What the policies say (3 quotes)
"Except where required by law or as necessary to address malicious use of the Service, and only if Customer has not opted into prompt and/or chat logging, OpenRouter will delete Inputs and Outputs promptly following generation of the relevant Output."
Data Processing Agreementopenrouter.aicaptured 2026-11-08"Prompts are not logged by default, and OpenRouter retains content only if you opt in to logging or it is flagged for CSAM review."
OpenRouter AI Gateway for Enterpriseopenrouter.aicaptured 2026-11-08"Personal Data will be retained for as long as necessary taking into account the purpose of the Processing, and in compliance with applicable laws, including laws on the statute of limitations and Data Protection Laws."
Data Processing Agreementopenrouter.aicaptured 2026-11-08 - After you delete How long until it is gone
-
Stated Ask for deletion by email. OpenRouter deletes customer data from datastores and backups within 30 business days and confirms by email.
What the policy says
"Customer may request deletion of Customer Data at any time by emailing [support@openrouter.ai](mailto:support@openrouter.ai). OpenRouter deletes Customer Data from the datastores and backups within 30 business days of request and supplies notification of completion via email."
Data Processing Agreementopenrouter.aicaptured 2026-11-08 - Kept longer when Safety flags, legal holds, backups
-
Stated Exceptions: legal requirements, malicious-use handling, transient buffering/caching, CSAM-flagged content, and metadata outside 'API Payload' (account data, security logs, abuse-monitoring metadata). No durations are stated.
What the policies say (4 quotes)
"except for transient processing in memory, short-lived buffering or caching strictly necessary to transmit, secure, or complete the request, and records required by law."
Data Processing Agreementopenrouter.aicaptured 2026-11-08"OpenRouter may apply automated risk classification to Inputs and Outputs prior to deletion solely to detect violations of this Agreement; such classification does not result in retention of API payload content beyond the deletion timeline."
Data Processing Agreementopenrouter.aicaptured 2026-11-08"but excluding account data, billing records, authentication data, security logs, abuse monitoring metadata, and other operational records that do not contain the content of the API request or response."
Data Processing Agreementopenrouter.aicaptured 2026-11-08"OpenRouter will screen all inference requests, including ZDR traffic, for child sexual abuse material (CSAM) in flight. Content flagged as potential CSAM may be retained for human review, reporting, and preservation where required by law."
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08 - Zero data retention Whether it exists and who can get it
-
Stated The DPA defines ZDR and commits to ZDR-only routing when enabled. Enterprise accounts default to ZDR only, so Safety Retention endpoints are excluded. Provider compliance isn't guaranteed.
What the policies say (4 quotes)
""**Zero Data Retention**" or "**ZDR**" means OpenRouter does not persistently store API Payloads after completion of the applicable API request and response"
Data Processing Agreementopenrouter.aicaptured 2026-11-08"When ZDR-only routing is enabled by Customer, OpenRouter will not route Customer API requests to AI Model Providers that are not designated as ZDR-eligible in OpenRouter's provider registry."
Data Processing Agreementopenrouter.aicaptured 2026-11-08"it does not constitute OpenRouter's guarantee of AI Model Provider compliance."
Data Processing Agreementopenrouter.aicaptured 2026-11-08"If you haven’t chosen, self-serve accounts allow Safety Retention and enterprise accounts use ZDR only."
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08 - Trains on your data By default
-
Stated OpenRouter doesn't train on inputs or outputs. With a DPA, provider training limits come from the DPA and OpenRouter's agreements with providers. EU API payloads aren't trained on unless instructed.
What the policies say (3 quotes)
"If you have a Data Processing Agreement with us, the terms of that agreement and our separate agreements with Model Providers govern how your data is handled by each Model Provider, including any restrictions on model training."
Privacy Policyopenrouter.aicaptured 2026-11-08"**OpenRouter does not use your Inputs or Outputs for model training.**"
Privacy Policyopenrouter.aicaptured 2026-11-08"(ii) not use API Payloads submitted through the EU API to train, fine-tune, improve, or develop models or services except as expressly instructed by Customer in writing"
Data Processing Agreementopenrouter.aicaptured 2026-11-08 - Opting out How, and what it doesn't cover
-
Stated Uses the same account settings as self-serve: exclude providers that train, or particular model providers. Training policies are as providers represent them; OpenRouter doesn't guarantee compliance.
What the policies say (3 quotes)
"Customer may configure in Customer's account settings to exclude Processing by certain AI Model Providers."
Data Processing Agreementopenrouter.aicaptured 2026-11-08"Inclusion on such list reflects the AI Model Provider's published or represented policy of "no retention and no training" on zero-data-retention API payloads"
Data Processing Agreementopenrouter.aicaptured 2026-11-08"If you opt out of training in your account settings, OpenRouter will not route to providers that train."
Provider Loggingopenrouter.aicaptured 2026-11-08 - Human review Whether people read conversations
-
Stated Only personnel who perform the Service may access personal data, under confidentiality obligations. CSAM-flagged content may be reviewed by people.
What the policies say (2 quotes)
"OpenRouter shall ensure that OpenRouter's access to Personal Data is limited to those personnel performing the Service in accordance with the Agreement."
Data Processing Agreementopenrouter.aicaptured 2026-11-08"Content flagged as potential CSAM may be retained for human review, reporting, and preservation where required by law."
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08 - Memory Remembered facts and profiles
-
Not stated The captured policies describe no persistent memory or user-profile feature.
- Connected apps Email, calendar, drive
-
Not stated The captured policies don't describe connecting email, calendar, or drive accounts.
- Agent actions Actions taken, browsing, credentials
-
Stated No agent product is described. Server tools and plugins follow the third-party services' policies and are outside ZDR enforcement.
What the policy says
"ZDR enforcement only applies to provider routing for inference requests. It does not apply to [plugins](/docs/guides/features/plugins) and tools you choose to enable"
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08 - Your inputs Who owns them
-
Inferred Inferred: the DPA is part of the Terms, where you keep rights in inputs. A separate enterprise contract may differ, but none was captured.
What the policies say (2 quotes)
"forms a part of the Terms of Service or other electronic agreement between OpenRouter, Inc."
Data Processing Agreementopenrouter.aicaptured 2026-11-08"You retain copyright and any other proprietary rights that you may hold in the Input."
Terms of Serviceopenrouter.aicaptured 2026-11-08 - Outputs Who owns them
-
Inferred Inferred: since the DPA is part of the Terms, output rights likely follow each model's terms as for self-serve. No enterprise contract was captured.
What the policy says
"Your ownership rights in the Output are set forth in the Model Terms for each Model you use."
Terms of Serviceopenrouter.aicaptured 2026-11-08 - License you grant Scope, and whether it is perpetual
-
Inferred The DPA limits personal-data processing to the customer's documented instructions. Inferred: the Terms' content licenses, including the perpetual opt-in logging license, likely still apply. The captured policies don't reconcile them.
What the policies say (2 quotes)
"OpenRouter shall treat Personal Data as Confidential Information and shall Process Personal Data on behalf of and only in accordance with Customer's documented instructions"
Data Processing Agreementopenrouter.aicaptured 2026-11-08"If you have opted into prompt logging in your account settings, chat logging is also automatically enabled, and you grant OpenRouter a worldwide, perpetual, irrevocable, non-exclusive, royalty-free, fully paid right and license (with the right to sublicense)"
Terms of Serviceopenrouter.aicaptured 2026-11-08 - Sharing Model providers, subprocessors, ads
-
Stated Subprocessors (trust.openrouter.ai) get only strictly necessary access and are barred from other purposes. You can subscribe to 30 days' notice of new ones; model providers are excluded from that notice.
What the policies say (3 quotes)
"Authorized Sub-processors are provided [here](https://trust.openrouter.ai/)."
Data Processing Agreementopenrouter.aicaptured 2026-11-08"excluding processing by AI Model Providers, OpenRouter shall provide thirty (30) days notification of a new Subprocessor(s) before authorizing any new Subprocessor(s) to Process Personal Data"
Data Processing Agreementopenrouter.aicaptured 2026-11-08"OpenRouter will restrict the onward Subprocessor's access to Personal Data only to what is strictly necessary to provide the Service, and OpenRouter will prohibit the Subprocessor from Processing the Personal Data for any other purpose."
Data Processing Agreementopenrouter.aicaptured 2026-11-08 - Where data lives Regions and residency
-
Stated Hosted on GCP in US regions. EU/US in-region routing keeps prompts and completions in-region; account and billing records may be in the US. An EU-only addendum covers API payloads.
What the policies say (5 quotes)
"Google Cloud Platform hosting in US regions; data at rest is region-restricted."
Data Processing Agreementopenrouter.aicaptured 2026-11-08"send a request to `https://eu.openrouter.ai` or `https://us.openrouter.ai`, and its prompts and completions are processed within that region and do not leave it."
Provider Loggingopenrouter.aicaptured 2026-11-08"Account and billing records may be stored or processed in the US."
OpenRouter AI Gateway for Enterpriseopenrouter.aicaptured 2026-11-08"this EU-only restriction applies solely to API Payloads; it does not restrict the location of account data, billing records, authentication data, security logs, abuse monitoring metadata, or other operational records"
Data Processing Agreementopenrouter.aicaptured 2026-11-08"At this time, Input & Output Logging does **not** apply to requests routed through `eu.openrouter.ai` or `us.openrouter.ai`."
Input & Output Loggingopenrouter.aicaptured 2026-11-08 - Enterprise controls Retention settings, DPA, SSO
-
Stated Offers SSO/SCIM, org-wide data policies, guardrails, exportable request reports, a DPA (theirs or yours), a yearly audit right, and 72-hour breach notice. Custom retention periods aren't mentioned.
What the policies say (5 quotes)
"Add SSO, SCIM, and org-wide data policies"
OpenRouter AI Gateway for Enterpriseopenrouter.aicaptured 2026-11-08"View and export all API requests across all users."
OpenRouter AI Gateway for Enterpriseopenrouter.aicaptured 2026-11-08"Our DPA, or we review yours"
OpenRouter AI Gateway for Enterpriseopenrouter.aicaptured 2026-11-08"no more than once a year by Customer and performed by an independent auditor as agreed upon by Customer and OpenRouter."
Data Processing Agreementopenrouter.aicaptured 2026-11-08"shall notify Customer without undue delay, and in any case, within seventy-two (72) hours after becoming aware of the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Personal Data"
Data Processing Agreementopenrouter.aicaptured 2026-11-08
Notes
-
OpenRouter has two separate opt-ins for storing content. Input & Output Logging (Observability settings) is private, offers no discount, and OpenRouter says it doesn't use the data. 'OpenRouter Use of Inputs/Outputs' (Privacy settings) lets OpenRouter use your data to improve the product, for a 1% discount. Both are off by default.
What the policies say (2 quotes)
"Enabling OpenRouter to use your inputs/outputs is an independent setting, enabled in Privacy, that allows OpenRouter to use your data to improve the product in exchange for a 1% discount on all model usage. You can enable one, the other, or both."
Input & Output Loggingopenrouter.aicaptured 2026-11-08"Off by default. Enable it in your [Observability settings](https://openrouter.ai/workspaces/default/observability)."
Data Collectionopenrouter.aicaptured 2026-11-08 -
The Terms and the docs pull in different directions. Opting into 'prompt logging' in the Terms grants a perpetual, irrevocable license that includes selling anonymized content. The docs say OpenRouter has never sold or licensed prompt data, and doesn't use logged data. The Terms don't say which of the docs' settings counts as 'prompt logging'.
What the policies say (3 quotes)
"(3) license or sell your User Content in anonymized form, where your User Content is not associated with you or your account."
Terms of Serviceopenrouter.aicaptured 2026-11-08"OpenRouter has never sold or licensed prompt data."
Data Collectionopenrouter.aicaptured 2026-11-08"If you have enabled Private Prompt Storage, you grant OpenRouter a worldwide, revocable, non-exclusive, royalty-free, fully paid right and license to host, store, copy, and use your User Content solely for purposes of displaying the User Content to you."
Terms of Serviceopenrouter.aicaptured 2026-11-08 -
The upstream provider policy table lists 97 providers. By retention: 59 'Zero retention', 11 'Retained for 30 days' (including Anthropic), 1 at 55 days (Google AI Studio), and 26 'retained for unknown period' (including OpenAI). By training: 4 are marked 'May train' (DeepSeek, Liquid, NVIDIA, Stealth). Apart from ZDR enforcement, retention doesn't affect routing; users filter providers themselves.
What the policies say (3 quotes)
"OpenRouter does not have routing rules that change based on data retention policies of providers, but the retention policies as reflected in each provider’s terms are shown below."
Provider Loggingopenrouter.aicaptured 2026-11-08"| DeepSeek | Prompts are retained for unknown period | ✕ May train |"
Provider Loggingopenrouter.aicaptured 2026-11-08"| Google AI Studio | Retained for 55 days | ✓ Does not train |"
Provider Loggingopenrouter.aicaptured 2026-11-08 -
The ZDR-eligible endpoint list has about 1,116 model/provider rows across about 65 provider labels. DeepInfra, Azure, Google, Bedrock, and Mistral have the most rows. Only Google endpoints (56 rows) are marked Safety Retention. First-party Anthropic and OpenAI endpoints are absent; their models are available through Bedrock, Vertex, or Azure.
What the policies say (3 quotes)
"It also includes Safety Retention endpoints, which are used only if you [allow Safety Retention](#allowing-or-excluding-safety-retention)."
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08"| **Anthropic** | Removes first-party Anthropic endpoints (Bedrock and Vertex remain available)"
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08"| **OpenAI** | Removes first-party OpenAI endpoints (Azure remains available)"
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08 -
The pages conflict on Google Vertex. The provider table claims three tiers including Safety Retention, but no row is labeled Safety Retention, and it lists Google Vertex as 'Zero retention'. The ZDR page says Google has required Safety Retention on Vertex since October 18, 2026.
What the policies say (3 quotes)
"| Google Vertex | Zero retention | ✓ Does not train |"
Provider Loggingopenrouter.aicaptured 2026-11-08"Starting October 18, 2026, Google requires Safety Retention for Google models served through Vertex."
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08"The [provider logging](/docs/guides/privacy/provider-logging#data-retention--logging) table shows which providers use Safety Retention."
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08 -
CSAM screening now covers ZDR traffic, and the docs say the related terms are being updated. The DPA's ZDR definition (updated August 26, 2026) doesn't mention a CSAM exception.
What the policies say (2 quotes)
"We’re updating this page and our related terms."
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08"except for transient processing in memory, short-lived buffering or caching strictly necessary to transmit, secure, or complete the request, and records required by law."
Data Processing Agreementopenrouter.aicaptured 2026-11-08 -
OpenRouter samples some prompts to categorize them for its rankings, using a zero-retention model. For users who haven't opted in, the results are stored anonymously.
What the policy says
"OpenRouter samples a small number of prompts for categorization to power our reporting and model ranking. If you are not opted in to OpenRouter use of inputs/outputs, any categorization of your prompts is stored completely anonymously and never associated with your account or user ID."
Data Collectionopenrouter.aicaptured 2026-11-08 -
On BYOK keys and private endpoints, ZDR status depends on the customer's own attestation, which OpenRouter doesn't verify.
What the policy says
"A declaration is your attestation about your agreement with the upstream. OpenRouter records it and routes on it, and does not independently verify the upstream’s contractual behavior."
Zero Data Retention - How OpenRouter gives you control over your dataopenrouter.aicaptured 2026-11-08 -
The privacy policy's GDPR/state-law table gives 'to perform a contract with you' as the legal basis for providing the Service 'and where applicable, for Model training and improvement by Model Providers'. OpenRouter's own research relies on legitimate interest.
What the policies say (2 quotes)
"Provide, analyze, and maintain our Service, and where applicable, for Model training and improvement by Model Providers. The legal basis is to perform a contract with you."
Privacy Policyopenrouter.aicaptured 2026-11-08"Improve and develop our Service and conduct research. The legal basis is a legitimate interest."
Privacy Policyopenrouter.aicaptured 2026-11-08 -
DPA Schedule 1 bars subprocessors from processing personal data for any other purpose. The DPA doesn't say outright whether upstream AI Model Providers count as Subprocessors, though it excludes them from the new-subprocessor notice.
What the policies say (2 quotes)
"OpenRouter will restrict the onward Subprocessor's access to Personal Data only to what is strictly necessary to provide the Service, and OpenRouter will prohibit the Subprocessor from Processing the Personal Data for any other purpose."
Data Processing Agreementopenrouter.aicaptured 2026-11-08"excluding processing by AI Model Providers, OpenRouter shall provide thirty (30) days notification of a new Subprocessor(s)"
Data Processing Agreementopenrouter.aicaptured 2026-11-08 -
Under the DPA, personal data covers names, contact details, IP addresses, timestamps, API keys, account IDs and anything in Inputs. No sensitive-data processing is intended; the customer must notify OpenRouter if it sends any.
What the policies say (3 quotes)
"Name, contact information, online identifiers (including without limitation, IP address and timestamps, API keys), account/user IDs, any information provided by Authorized Users in unstructured data (including in Inputs), and other information necessary to provide the Service under the Agreement."
Data Processing Agreementopenrouter.aicaptured 2026-11-08"No processing of Sensitive Data or any special categories is intended"
Data Processing Agreementopenrouter.aicaptured 2026-11-08"Customer is solely responsible for determining and notifying OpenRouter of such processing and additional restrictions and/or security measures (if any) that are needed to be applied to the Sensitive Data transferred by Customer."
Data Processing Agreementopenrouter.aicaptured 2026-11-08
Open questions
Questions the captured policies leave unanswered, and where the answer probably lives.
Default state of the account settings that allow routing to providers that may train (paid and free models): not stated. Likely on the privacy settings page or provider-selection docs.
How long OpenRouter keeps per-request metadata: not stated. The privacy policy's state-disclosures table, now captured, lists categories, uses and disclosures but no retention periods; the logs/activity docs might say.
How long OpenRouter keeps CSAM-flagged content and its own Safety Retention data: not stated. Likely in the CSAM screening announcement (openrouter.ai/blog/announcements/csam-screening).
Retention period, and which uses count as 'improve the product', for data shared under 'OpenRouter Use of Inputs/Outputs' (1% discount); also which setting Terms 6.2 'prompt logging' refers to. Not stated; would need a Privacy settings help page or a clarified Terms.
Deletion timeframe for individual (non-DPA) users, and whether Input & Output Logging data is deleted when an account closes. Not stated beyond 'request deletion'.
Whether and how long chat-interface conversations are stored: not stated. Likely in chat/playground docs.
Retention of temporarily stored batch/large-request content (Terms 6.3(b)): documentation is referenced but wasn't captured.
Each upstream provider's actual terms and retention details: only summarized here. The provider-selection#terms-of-service page aggregates them.
The subprocessor list and SOC 2 report at trust.openrouter.ai weren't captured.
Any enterprise Subscription Agreement terms (ownership, licenses, custom retention) weren't captured.
How BYOK provider keys and Broadcast destination credentials are stored and secured: not stated. Likely in BYOK and Broadcast docs.
Documents read
-
Data Collection
openrouter.ai captured 2026-11-08 sha256 d0729cf83c41 -
Data Processing Agreement
openrouter.ai captured 2026-11-08 sha256 62a312be4c0d -
Input & Output Logging
openrouter.ai captured 2026-11-08 sha256 ce4e1f62c759 -
OpenRouter AI Gateway for Enterprise
openrouter.ai captured 2026-11-08 sha256 1e293823a7dd -
Privacy Policy
openrouter.ai captured 2026-11-08 sha256 310e69e72c14 -
Provider Logging
openrouter.ai captured 2026-11-08 sha256 6582d63c44c3 -
Terms of Service
openrouter.ai captured 2026-11-08 sha256 aaa888c7f717 -
Zero Data Retention - How OpenRouter gives you control over your data
openrouter.ai captured 2026-11-08 sha256 a0a6dcc4f3c1