Openwake · evidence pack

OpenRouter

https://openrouter.ai · record 691 · read 2026-10-20 · rules/v1 · generated 2026-10-23 04:08 UTC

Facts

Trains on customer data
opt_out
“Under the California Consumer Privacy Act ("CCPA"), you may exercise your right to opt out of "sharing" as defined in the CCPA by selecting Model Providers that do not use your personal data for training.”
privacy policy · https://openrouter.ai/privacy · confidence 0.60
Opt-out mechanism
Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics, available at: https://tools.google.com/dlpage/gaoptout.
“Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics, available at: https://tools.google.com/dlpage/gaoptout.”
privacy policy · https://openrouter.ai/privacy · confidence 0.50
AI features
present
“To understand how your Inputs are used by LLMs, check their LLM Terms here.”
privacy policy · https://openrouter.ai/privacy · confidence 0.55
Model providers named
none named
No supporting text found in the documents read.
privacy policy · https://openrouter.ai/privacy · confidence 0.20
Retention
not stated
No supporting text found in the documents read.
privacy policy · https://openrouter.ai/privacy · confidence 0.20
Hosting regions
not stated
No supporting text found in the documents read.
privacy policy · https://openrouter.ai/privacy · confidence 0.20
Subprocessor notice
30 days
“Customer can send an email at [email protected] to subscribe to notifications of new Subprocessors, and if Customer subscribes, excluding processing by AI Model Providers, OpenRouter shall provide thirty (30) days notification of a new Subprocessor(s) before authorizing any new Subprocessor(s) to Process Personal Data in connection with the provision of the applicable Service.”

Subprocessors (5)

NameCategoryLocationQuoted from
Zoomotherunstated
“* Zoom * Lovable * AMD * Amplitude * Webflow * Archer”
Amplitudeotherunstated
“* Amplitude * Webflow * Archer * Mintlify * WTW”
Google CloudhyperscalerUS
“* Google Cloud Platform hosting in US regions; data at rest is region-restricted.”
Cloudflareotherunstated
“* Cloudflare WAF, rate-limiting and DDoS mitigation. * Role-based access; MFA; least privilege.”
Datadogotherunstated
“* Centralized logging via Datadog; immutable audit logs. * Quarterly vulnerability scans; annual external penetration test.”

Sources read

DocumentURLReadContent hashLedger
subprocessorshttps://trust.openrouter.ai/subprocessors2026-10-13de30afbc48e180f6…seq 53276
ai_policyhttps://openrouter.ai/docs/guides/privacy/data-collection2026-10-14b877f921abba1010…seq 54518
privacy_policyhttps://openrouter.ai/privacy2026-10-2070f0a80f65a5b212…seq 61344
dpahttps://openrouter.ai/data-processing-agreement2026-10-200852fdb907cd0d08…seq 61345
termshttps://openrouter.ai/terms2026-10-20c23cf167276478c8…seq 61346
Ledger proof for this record.
seq 61361 · key 2f898a895f05b7a0 · 2026-10-20T05:26:56.502Z
hash f15dd021aac471106dc683122833065bbf20963dbc52ed8abe372a918341fcba
prev 2418f9fe7643aada04ae0a069a55781f1aef62f0faa3fbdffeb3313be1ca7269
payload 1ef5bfa3294b95b77e021de5407e29c378b621e00a9540f2dd3ccf5bf5844746
signature g7qMg+Uu7zZZy9aIVRBx3aTrAZILbit+JeLGzzf8EwAAi1ZBro6n1mDwMtVJEc9Vd78V+U0yM9qI0FnZqN+PDQ==
anchored 2026-10-20 at head seq 61385 90198bd6475ff15c3c045ae583b71db10ee5886294226a625dc412e74fd1ffd3
Fetch /v1/keys; for each ledger entry recompute sha256(prev_hash|kind|ref_id|payload_hash|created_at ISO) and verify the Ed25519 signature over that hash. Anchors are committed to git; compare the anchored head with the chain.