VeraxConsole
← All vendors

OpenRouter

medium risk

Developer Toolsopenrouter.aiverified 2025-03-03

Data-handling profile

Trains on input
No — does not train on customer inputs
Retention
Prompts and completions are retained for up to 30 days to monitor for abuse and resolve issues, after which they are permanently deleted. Upstream model provider retention policies also apply to routed requests.
Data region
United States
Certifications
unknown
DPA available
No
Breach history
none
EU AI Act
As an API gateway routing requests to various third-party LLMs, OpenRouter acts as an intermediary. Compliance under the EU AI Act largely depends on the upstream model provider selected by the user, requiring separate data transfer assessments.

Sources

Every fact above is drawn from the vendor's public documentation, reviewed by a human, and version-stamped. Monitored daily for changes.

Watch this vendor

Get an email the day OpenRouter changes what it does with your data. Your address is never shown publicly or shared.

Change history

No material changes recorded since monitoring began.