Change record
CA-X-005706
OpenRouter Privacy Policy
Entity
Date detected
October 17, 2026
Severity
Low
Direction
Neutral
Taxonomy
Disclosure requirement change
Changes
1 sentence modified

Impact Summary

Generated by a model from the captured document; not read by a person
Low Neutral for users
Affected users
EU users All users

OpenRouter's privacy policy now includes an additional disclosure circumstance for data sharing: routing API requests in-region in Europe through EU in-region routing on Business. This clarifies that customer data may be disclosed to facilitate regional data routing compliance, a practice the policy previously did not explicitly describe in its data disclosure section.

Stay ahead of the changes
Track OpenRouter and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Share 𝕏 Share in Share 🔒 PDF

What this means for you

Generated by a model from the captured document; not read by a person

The updated policy now explicitly states that OpenRouter may disclose customer data to route API requests in-region in Europe as part of its EU in-region routing service on Business. This clarifies an operational practice rather than introducing a new data-sharing authority. Users relying on OpenRouter's Business tier for EU in-region routing should be aware that data routing to facilitate this service is an authorized disclosure circumstance under the policy.

Key Clauses Affected

Generated by a model from the captured document; not read by a person
data disclosure circumstances

Added EU in-region API request routing as an authorized data-sharing circumstance.

Full clause-by-clause analysis available with Insight.
ⓘ

This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology

Evidence Verification

✓ Verified
Previous Version
f6eb541449c4fa68f42eab951fe50a461ff1a57daf43518e4fcd42146326c1ee
October 16, 2026 01:07 UTC
✓ Verified
Current Version
586d37214934b55657c6c14282394069d23ca94baf7ff4308d9b9a03889daa7a
October 17, 2026 00:55 UTC
✓ Verified
Change Detected
October 17, 2026 00:55 UTC
✓
Analysis Methodology
✓ Verified
Source Document
https://openrouter.ai/privacy
Citation Record
Entity: OpenRouter
Document: OpenRouter Privacy Policy
Record ID: CA-X-005706
Version: CA-V-007674
Captured: 2026-10-17 00:55:40 UTC
URL: https://conductatlas.com/change/2026-10-17-openrouter-openrouter-privacy-policy-5706/
Accessed: Oct. 17, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
For legal and compliance teams

Institutional Analysis

Generated by a model from the captured document; not read by a person
Assessment

OpenRouter added a disclosure to its privacy policy clarifying that customer data may be shared to facilitate EU in-region API request routing on its Business tier. This is a clarification of an operational practice rather …

🔒 Full institutional analysis

Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.

Unlock the full institutional analysis — Insight

ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-X-005706.

Full Changes

View complete diff →

Document Context

Version history → Policy drift analysis → Document page →
Document
OpenRouter Privacy Policy
Entity
OpenRouter
Captured
October 17, 2026
Source URL
https://openrouter.ai/privacy
Other changes to OpenRouter Privacy Policy
Previous change Sep 1, 2026
OpenRouter expanded its privacy policy to document a new Files API feature that allows users to upload and persistently store …
Medium Neutral
View full version history →
More from OpenRouter
Sep 1, 2026 Medium
OpenRouter Privacy Policy

OpenRouter expanded its privacy policy to document a new Files API feature that allows users to upload and persistently store …

Sep 1, 2026 Medium
OpenRouter Terms of Service

OpenRouter raised its minimum age requirement from 13 to 18 years old and removed the parental consent option for users …

Aug 5, 2026 Medium
OpenRouter Terms of Service

OpenRouter restructured its Terms of Service to add detailed provisions governing API credentials, promotional credits, and credit mechanics. The updated …

Get the weekly coverage letter

Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.

Stay ahead of the changes

Track OpenRouter policy changes

Get alerted when this policy changes again, including what changed and why it matters.

All OpenRouter changes →