OpenRouter raised its minimum age requirement from 13 to 18 years old and removed the parental consent option for users under 18. The company also added a new Files API section establishing procedures for uploading and storing files, including automated screening for child sexual abuse material (CSAM) and malware, along with a DMCA takedown policy and designated copyright agent. These changes establish new content moderation obligations and clarify OpenRouter's legal reporting duties under federal law.
Consumers: Users under 18 can no longer use the Service, even with parental permission.
Consumers uploading files: You warrant you have the legal right to upload each file you store.
Consumers uploading files: Uploaded files are subject to content restrictions; violation may result in account suspension or law enforcement reporting.
Consumers uploading files: Your uploaded files may be automatically scanned for illegal content and malware without advance notice.
Consumers uploading files: OpenRouter may report files to law enforcement and suspend your account if files violate law.
Consumers: OpenRouter must report suspected child sexual abuse material to federal authorities regardless of Terms language.
Consumers: Copyright holders can file takedown notices; repeat infringers may have accounts terminated.
The updated terms establish an 18-year minimum age requirement with no parental consent pathway, effectively excluding users under 18 from the Service. For users uploading files, OpenRouter reserves the right to screen, scan, and review files at any time without notice, including through automated detection for CSAM and malware, and may suspend access or report files to law enforcement as required by law. The terms clarify that OpenRouter retains independent legal obligations to report apparent CSAM to the National Center for Missing & Exploited Children under federal law, and establish a DMCA takedown procedure with potential account termination for repeat infringers. You can review OpenRouter's Privacy Policy for details on file retention and deletion procedures.
→ If you are under 18, you are no longer eligible to use OpenRouter; existing accounts will be subject to the new age requirement.
→ If you upload files, review the content restrictions (no CSAM, malware, or infringing content) and understand that files may be automatically scanned and reported to law enforcement.
→ If you receive a DMCA takedown notice, you may submit a counter-notice to the designated DMCA agent at copyright@openrouter.ai.
ConductAtlas has recorded 3 material changes to this document over 56 days of monitoring (since July 2026).
Across all monitored documents, OpenRouter has made 4 significant changes.
Raised from 13 to 18 years; parental consent option removed.
Users must warrant ownership of uploaded files; OpenRouter may screen for CSAM and malware without notice and may suspend access or report to law enforcement.
OpenRouter clarified its independent legal duty to report apparent CSAM to the National Center for Missing & Exploited Children under 18 U.S.C. § 2258A.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Wording edits to this record that do not change what it claims. Changes to a claim are published as corrections.
OpenRouter raised its minimum age from 13 to 18 and eliminated parental consent, bringing its eligibility requirement in line with many AI service providers. The company added explicit language describing automated CSAM and malware screening …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-X-004768.
OpenRouter's privacy policy now includes an additional disclosure circumstance for data sharing: routing API requests in-region in Europe through EU …
OpenRouter expanded its privacy policy to document a new Files API feature that allows users to upload and persistently store …
OpenRouter restructured its Terms of Service to add detailed provisions governing API credentials, promotional credits, and credit mechanics. The updated …
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
Get alerted when this policy changes again, including what changed and why it matters.