Provision record
OpenRouter · OpenRouter Privacy Policy · View original document ↗

Data Processing Agreement Governs Enterprise Data

Medium severity Explicit document language Common · 298 of 352 platforms
Stay ahead of the changes
Track OpenRouter and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
ⓘ

This analysis describes what OpenRouter's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

Recent Activity

This document changed recently

Medium Sep 1, 2026

The updated policy raises the minimum age to use OpenRouter from 13 to 18 years old, meaning users under 18 are no longer eligible. For users who upload files through the Files API feature, the revised terms establish specific handling procedures: files are encrypted at rest and in transit, transmitted to model providers you select, retained until deletion or account closure, and not used for training or marketing purposes. The policy specifies that access is restricted to automated systems necessary to operate the service, and manual access occurs only for investigating violations, responding to legal process, or providing support. You can delete uploaded files at any time, which triggers removal efforts from active systems and backups within timeframes specified in the Data Processing Agreement.

View change record →

How other platforms handle this

Pinterest Medium

In all other cases, these Terms, and any rights and licenses granted hereunder, may not be transferred or assigned by you, but may be assigned by us without restriction. Any attempted transfer or assignment in violation hereof shall be null and void.

Stripe Medium

If we rely on certain legal bases (such as "legal obligation" or "contractual necessity") and you do not provide us with your Personal Data, we may not be able to lawfully provide you services.

Twitch Medium

Upon termination of these Terms of Service, any provision which, by its nature or express terms should survive, will survive such termination or expiration, including, but not limited to, Sections 7-10, and 14-20.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
If you have a Data Processing Agreement with us, the terms of that agreement and our separate agreements with Model Providers govern how your data is handled by each Model Provider, including any restrictions on model training.

Excerpt from OpenRouter's Privacy Policy

Provision details

Document information
Document
OpenRouter Privacy Policy
Entity
OpenRouter
Date stated by the document
Aug. 31, 2026
As printed in OpenRouter’s text (version CA-V-006865), not a ConductAtlas date.
Tracking information
First captured by ConductAtlas
May 12, 2026
Text quoted from version
CA-V-006865, captured Sept. 11, 2026
Record ID
CA-P-066412
Document ID
CA-D-000811
Evidence Provenance
Source URL
Wayback Machine
Archived bytes SHA-256 (version CA-V-006865)
477b94e5c69d71aee92300ecdd2be2b925d76d0605d518b54f52833b6117fe0b
Analysis generated
May 21, 2026 01:12 UTC
Methodology
Evidence
✓ Excerpt found verbatim in version CA-V-006865 (checked Oct. 5, 2026)
Citation Record
Entity: OpenRouter
Document: OpenRouter Privacy Policy
Record ID: CA-P-066412
Version: CA-V-006865
Captured: 2026-09-11 01:30:03 UTC
SHA-256: 477b94e5c69d71ae…
URL: https://conductatlas.com/platform/openrouter/openrouter-privacy-policy/provision/CA-P-066412/data-processing-agreement-governs-enterprise-data/
Accessed: Oct. 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does OpenRouter's Data Processing Agreement Governs Enterprise Data clause do?

The clause states: “If you have a Data Processing Agreement with us, the terms of that agreement and our separate agreements with Model Providers govern how your data is handled by each Model Provider, including any restrictions on model training.”

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 298 platforms. See the full comparison.

Is ConductAtlas affiliated with OpenRouter?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenRouter.