Provider Data Handling

How to read this page

AI Reserve routes requests to the model you select. The table below lists each model provider we route to and summarizes, from that provider's own published enterprise API terms:

Trains on API inputs? — whether the provider uses API inputs or outputs to train or fine-tune its models under its current terms.
Retention — how long the provider retains prompts and completions after processing.
Processing region — where the provider states requests are processed and stored.
Role — the provider's role under our Data Processing Addendum. A Subprocessor processes data only on our documented instructions. A provider that processes data for its own purposes (for example, one whose terms permit training on inputs) is an Independent controller, not a subprocessor, and is identified as such.

Pending verification. Where a characteristic could not be confirmed from the provider's official documentation as of the last-reviewed date, it is marked pending verification — confirm before relying on it. We do not guess: an unmarked entry reflects the provider's published terms as reviewed on the date above. Where a characteristic instead comes from a written confirmation by the provider or its partner organization rather than published terms, the entry says so inline and cites the confirmation in Sources.

Choosing a model chooses a provider. The characteristics below differ materially between providers — in particular, DeepSeek (direct API) and Moonshot AI process requests outside the United States and their terms permit use of inputs to improve their services. If your organization's policy restricts where data may be processed, ask us to pin your account's allowed models — pinning is enforced at the gateway.

Provider table

Provider	Trains on API inputs?	Retention	Processing region	Role
OpenAI (direct API)	No, by default.¹	Inputs/outputs retained up to 30 days for abuse monitoring, then deleted. Zero Data Retention available on approval.²	United States	Subprocessor
Anthropic (direct API)	No, under commercial terms.³	Inputs/outputs deleted within 30 days. Note: Anthropic's "Covered Models" (including Claude Fable 5, which we route) require 30-day retention and are not eligible for Zero Data Retention.⁴	United States	Subprocessor
AWS Bedrock	No. Inputs/outputs are not used to train foundation models and are not shared with the underlying model providers.⁵	Not stored by default; retention depends on the account's Bedrock data-retention mode (abuse-detection retention may apply in `default` mode; `none` = zero retention). Our account's configured mode: pending verification.⁶	United States (us-east-1)	Subprocessor
Google Vertex AI	No. Google states customer data is not used to train or fine-tune foundation models, and prompts/completions for partner models (Anthropic Claude) are not shared with the model's publisher.²³	Not stored by default — Google states prompts and responses for Vertex generative models are processed in memory and not logged for training; abuse-monitoring and caching behavior is configurable at the project level. Our projects' configured mode: pending verification.²³	United States (us-east5)	Subprocessor
Google Gemini API (paid tier)	No, on paid services.⁷	Prompts/responses logged up to 55 days solely for abuse monitoring, then deleted.⁸	Global — Google's terms state data may be stored transiently or cached in any country where Google or its agents maintain facilities.⁷	Subprocessor
xAI (Grok)	No, without explicit permission.⁹	Requests/responses stored encrypted for 30 days for abuse auditing, then auto-deleted. Zero Data Retention available for enterprise accounts.⁹ The platform can also route text-to-speech to xAI (input text processed like any request) and supports customer-created custom voices — a capability that is organization-gated and off by default for every organization. If an organization's administrator opts in, reference audio uploaded to create a custom voice (a recording of a person's voice) is transmitted to xAI, which builds and stores the resulting voice model keyed to the voice id until the organization deletes it; AI Reserve itself stores no audio, only the ownership and consent record. Creation requires an explicit consent attestation for the voice being cloned.	United States	Subprocessor
Perplexity (Sonar)	No.¹⁰	Zero data retention on the Sonar API — prompts/responses deleted after processing; only billing metadata (token counts, timestamps) retained.¹⁰	United States (AWS, North America)¹¹	Subprocessor
DeepSeek (direct API)	Yes. DeepSeek's privacy policy states inputs are used to train and improve its models and services.¹²	No published fixed deletion window; retained under its privacy policy. pending verification	China (People's Republic of China) — DeepSeek states it collects, processes, and stores data on servers in the PRC.¹²	Independent controller
Moonshot AI (Kimi)	Yes. Moonshot's platform privacy policy states user content is used to train and refine its models.¹³	No published fixed deletion window; retained under its privacy policy. pending verification	China (PRC-headquartered provider). Moonshot's international platform terms state its servers are located in Singapore; the endpoint serving our account is pending verification. Treat data sent to Kimi models as processed outside the United States under PRC-affiliated jurisdiction.¹³	Independent controller
Alibaba Cloud (Model Studio)	No — Alibaba Cloud's Model Studio privacy notice states customer data is never used for model training.²¹	Model Studio stores data generated from model and application calls under its service terms; no published fixed deletion window. pending verification²¹	United States (Virginia) for Qwen chat models (`dashscope-us` endpoint), except `qwen-3-coder-next`, which is served from Singapore (`dashscope-intl` endpoint — the only region offering that model, effective September 1, 2026); Singapore for Wan video generation and Qwen image generation (`qwen-image-3.0` / `qwen-image-3.0-pro`) — the `dashscope-intl` endpoint is the only region serving `wan3.0-video` and the Qwen Image 3 family. Alibaba states request data is stored in the selected region. The operator is a PRC-headquartered group: the platform labels Alibaba-served models China-based and serves them only to organizations that have not opted out of PRC-affiliated models.²¹	Subprocessor
MuleRouter (CarrotHub / SmartStudio ecosystem)	No — MuleRouter does not retain request data for training, confirmed in writing by the Alibaba Cloud International partner team (August 26, 2026; written vendor confirmation, not yet published terms).²⁶ MuleRouter's documentation states generated outputs belong entirely to the user.	No published fixed deletion window. Deletable on request: we hold the right to delete tasks run on MuleRouter, confirmed in writing by the Alibaba Cloud International partner team (August 26, 2026; written vendor confirmation, not yet published terms).²⁶	Singapore — confirmed in writing by the Alibaba Cloud International partner team (August 25, 2026).²⁶ The operator is an Alibaba Cloud–partnered entity serving the PRC-developed W3.0 (Wan 3.0) video family without upstream content moderation. The platform labels these models China-based and serves them only to organizations that have not opted out of PRC-affiliated models; additionally they are allowlist-restricted, adult-content-gated, and third-party-policy-gated, and never publicly listed.	Subprocessor
WaveSpeedAI PTE. LTD.	Serving since September 1, 2026 (Wan 2.7 video extension; the launch gate was enabled by a reviewed change), with Wan 2.7 image editing added September 2026 on the same account and launch gate. Training use for inference inputs: pending verification. WaveSpeedAI's privacy policy scopes "Training Data" to content customers explicitly upload to train models, which our integration never does.	WaveSpeedAI's documentation states generated media URLs generally expire within 7 days; retention/deletion terms for request inputs pending verification.	Singapore-incorporated operator (WaveSpeedAI PTE. LTD., per its published privacy policy); serving region and upstream affiliations pending verification — conservatively labeled China-affiliated until verified. When enabled, the models are allowlist-restricted, adult-content-gated, third-party-policy-gated, served only to organizations that have not opted out of PRC-affiliated models, additionally behind the unverified-retention consent gate while the retention terms above are pending, and never publicly listed.	Subprocessor
Mistral AI (La Plateforme)	No — Mistral's Terms of Use for the paid API state "We do not use Your Prompts and/or Your Outputs to train Our Model(s)". The free Experiment tier trains by default; our account is the paid tier.²²	Inputs/outputs retained 30 rolling days for abuse monitoring, then deleted. Zero Data Retention available on the API on request.²²	European Union — Mistral is a France-headquartered provider and states La Plateforme runs on EU-based infrastructure by default; exact serving region for our account: pending verification	Subprocessor
Together AI	No — training use is opt-in only and not enabled.¹⁴	Prompts/outputs not stored by default (zero-data-retention posture); temporary caching may be used for performance.¹⁴	United States	Subprocessor
Fireworks AI	No, without explicit opt-in (for example, Fireworks' FireOptimizer feature) — confirmed in writing by Fireworks AI (September 8, 2026; written vendor confirmation corroborating its published terms).¹⁵	Zero data retention by default — prompts/generations exist only in volatile memory for the duration of the request (a few minutes longer with prompt caching) and are never written to persistent storage; not shared with external model providers. Confirmed in writing by Fireworks AI (September 8, 2026; written vendor confirmation corroborating its published terms).¹⁵	United States	Subprocessor
DeepInfra	No — DeepInfra states it does not train on data submitted to its APIs (its docs note an exception for Google/Anthropic models hosted there, which we do not route through DeepInfra).¹⁹	Not stored to disk — inputs/outputs exist only in memory while the request is processed and are deleted after; inputs/outputs may be kept for a limited period for debugging under its terms.¹⁹	United States — provider states US-based data centers (one Canadian site, Toronto, opened July 2026)	Subprocessor
Novita AI	No — Novita states it does not train on customer data; its privacy policy states personal information is not used for model training and customer-content processing is governed by customer agreements. API-content-specific terms: pending verification.²⁰	No published fixed deletion window for API request content. pending verification	United States (San Francisco HQ). Serverless fleet spans multiple international regions; serving region for our account: pending verification	Subprocessor
Baseten	No — Baseten states customer data submitted to its inference APIs is not used to train models, and prompts and outputs sent through its model APIs are not used for model training or shared with external model providers, confirmed in writing by Baseten (September 7, 2026; written vendor confirmation).²⁴	Zero data retention by default — prompts and outputs sent through Baseten's model APIs are not retained, used for training, or shared with external model providers; confirmed in writing by Baseten (September 7, 2026; written vendor confirmation, not yet published terms).²⁴	United States (San Francisco HQ). Multi-cloud GPU fleet spans additional regions; serving region for our account: pending verification	Subprocessor
OpenRouter	No — OpenRouter does not train models; its own prompt logging is opt-in and off by default.¹⁶	OpenRouter stores request metadata only (no prompt/response content) by default. Retention at the downstream serving endpoint is governed by that endpoint's own policy; per-route endpoint policies for our account: pending verification.¹⁶	United States (routing layer); downstream serving endpoint varies by route. pending verification	Subprocessor (routing layer; see note)
NVIDIA (hosted NIM API catalog) Opt-in only — organization training consent required	Locked by default for every organization. Under the published API-catalog trial terms, NVIDIA may use inputs/outputs to improve its products and services, including AI models¹⁷. The default Nemotron models (`nemotron-3-super`, `nemotron-3-nano`, `nemotron-3-ultra`) therefore route to DeepInfra under its no-training terms (see the DeepInfra row above) and never touch NVIDIA. Separate, clearly-labeled NVIDIA-served options (`nemotron-3-super-nvidia`, `nemotron-3-ultra-nvidia`; a third option, `nemotron-3-nano-nvidia`, was retired by NVIDIA effective August 28, 2026) exist only behind an organization administrator's explicit training consent (see "Organization consent gates" below) — between August 10 and August 14, 2026 no NVIDIA-served options existed at all, and no traffic reaches NVIDIA unless an administrator has opted the organization in.	For organizations that opt in: content used to provide the service during the session; usage logged for security/fraud/abuse monitoring; inputs/outputs may be used to improve NVIDIA's products including AI models. No published fixed deletion window.	United States	Independent controller (only after organization training consent; no requests without opt-in)
Tensormesh (serverless inference)	Training-use terms: pending verification. Tensormesh-served models are locked by default for every organization and require an organization administrator's explicit retention consent in the AI Reserve console (see "Organization consent gates" below).	No published deletion window; retention terms pending verification and not currently disableable for our account.	United States pending verification	Subprocessor (only after organization consent; pending verification)
ByteDance (BytePlus ModelArk)	Training-use terms under the international ModelArk service: pending verification. ByteDance-served models (Seedream image, Seedance video) are labeled "China-based" (PRC-headquartered operator) and are unavailable to organizations that have not enabled PRC-hosted models.	No published deletion window for the international ModelArk API. pending verification	Singapore (BytePlus international, ap-southeast); operator headquartered in the PRC.	Subprocessor (only after organization consent; pending verification)
fal.ai (image/video generation)	No — fal's API services terms state client content is not used to train or develop its products, except for models designated "Pending Enterprise Ready".¹⁸	Request payloads stored 30 days by default (opt-out available per request); generated media stored on fal's CDN per configured lifecycle.¹⁸	United States	Subprocessor
Hugging Face, Inc. (Inference Endpoints)	No — Hugging Face states data sent to Inference Endpoints stays within the dedicated deployment and is not used to train or improve models.²⁵ Endpoints serve dedicated GPU deployments that enterprise administrators create one-click from the AI Reserve console; they are separate from gateway chat routing and receive traffic only for the deploying organization.	Not stored — Hugging Face states it does not store request payloads or tokens passed to an Inference Endpoint; prompts/completions exist in the dedicated endpoint only while the request is processed. Endpoint access-log and metrics retention for our account: pending verification.²⁵	United States — Hugging Face, Inc. is a US (New York) company; endpoints in the current deploy catalog provision on AWS `us-east-1`	Subprocessor

Notes & clarifications

Aggregators and open-weight models

Together AI, Fireworks AI, DeepInfra, Novita AI, Baseten, and OpenRouter serve open-weight models published by other organizations (for example, Meta Llama, Mistral, Qwen, DeepSeek, Moonshot Kimi, NVIDIA Nemotron, and OpenAI's GPT-OSS family). When a model is served by a US aggregator, the aggregator's data-handling terms apply — the model's original publisher never receives the request. For example, deepseek-v4-flash and kimi-k2.6 are served by Fireworks AI in the United States under Fireworks' zero-retention terms, even though the underlying models were published by DeepSeek and Moonshot. If Fireworks degrades, deepseek-v4-flash can fail over to its same-model US backup routes on Baseten or DeepInfra — the response's x-aireserve-served-model header always names the route that actually served, and that provider's terms above apply to that request. Likewise, the NVIDIA Nemotron 3 family (nemotron-3-super, nemotron-3-nano, nemotron-3-ultra) is served by DeepInfra: since August 2026 NVIDIA receives none of those requests (earlier traffic used NVIDIA's hosted NIM catalog — see the NVIDIA row above). The DeepInfra- and Novita-served routes (deepseek-v4-flash-deepinfra, deepseek-v4-flash-novita, qwen-3.8-max-deepinfra, qwen-3.8-max-novita) work the same way: the serving provider's terms above apply, and the model's publisher (DeepSeek, Alibaba) never receives the request. Only the direct-API rows above (DeepSeek direct, Moonshot's own API for kimi-k3 and moonshot-v1-*, Alibaba's Model Studio API for qwen-3.8-max, Mistral's La Plateforme API for mistral-medium-3.5, codestral-2508, and ministral-14b) send data to those companies.

AWS Bedrock model routing

Models with a -bedrock suffix route through AWS Bedrock in the United States. AWS operates the model inside AWS infrastructure; the model's publisher (Anthropic, Meta, Mistral, DeepSeek) does not receive prompts or completions, except where a specific Bedrock model requires provider data sharing and the account has explicitly enabled that mode — we have not enabled provider data sharing.

Since August 18, 2026 the Meta Llama and Mistral default names (llama-4-maverick, llama-4-scout, and mistral-large) are additionally served directly on AWS Bedrock alongside their OpenRouter route: the gateway load-balances each request across the two deployments of the identical model weights, and every individual request is processed entirely by one of them — AWS Bedrock's terms (row above) or OpenRouter's terms (row above) apply to that request accordingly. Meta and Mistral never receive these requests on either route. The -bedrock suffixed names remain available to pin a request to the Bedrock route exclusively.

Google Vertex AI model routing

Models with a -vertex suffix route through Google Vertex AI in the United States (us-east5). Google operates the model inside Google Cloud infrastructure as a data processor; the model's publisher (Anthropic) does not receive prompts or completions, and Google does not use them to train its models. Retention is configurable at the Google Cloud project level (see the table above).

Provider failover (same model, different host)

If the provider serving a selected model fails or is saturated, the gateway may retry the request through a disclosed failover chain instead of returning an error. By default that chain contains only deployments of the identical model weights hosted by a second provider on this page — for example, Anthropic Claude and Meta Llama models on AWS Bedrock — so the response still comes from the exact model selected, processed by a different disclosed subprocessor. The platform default never substitutes a different model: cross-model entries (for example, a smaller model in the same family) exist only where a client administrator has explicitly configured them in their own organization's fallback chain. Every response served by a fallback names the serving model in the x-aireserve-served-model response header — failover is disclosed per response, never silent. Failover never sends a request to a provider that is not on this page, and never to an Independent controller provider, unless a client administrator has explicitly configured such an entry in their own organization's fallback chain; chain entries hosted in the PRC are excluded for organizations that have opted out of PRC-hosted models. Model names with no second same-weights host carry no default failover chain at all (as do -bedrock and -vertex routes and deepseek-chat/deepseek-reasoner, which promise a single serving provider) — those fail with the provider's real error instead.

Organization consent gates

AI Reserve's default posture is that gateway traffic reaches only providers documented above as not training on API inputs, with disclosed, bounded retention. Models served by providers that soften either guarantee are locked by default for every organization and stay locked until an organization administrator explicitly opts in from the AI Reserve console:

Training consent unlocks models served by providers whose terms permit training on API inputs with no opt-out (DeepSeek direct API, Moonshot AI, and NVIDIA's hosted NIM catalog — reachable only via the clearly-labeled -nvidia options re-added behind this gate on August 14, 2026; the default Nemotron routes stay on DeepInfra and never touch NVIDIA).
Data-retention consent unlocks models served by providers whose retention can neither be turned off nor verified yet (Tensormesh).
PRC-server consent unlocks models served by providers operating under PRC jurisdiction (DeepSeek direct, Moonshot, Alibaba Cloud Model Studio, ByteDance BytePlus ModelArk).

A model behind more than one gate (for example DeepSeek's own API: PRC jurisdiction and training-permitted terms) requires every applicable consent. Locked models appear greyed-out in the model catalog with the required consent named, are excluded from chat and automatic routing, and API requests to them are refused. Failover chains never carry a request onto a model whose consents the organization has not given.

Zero Data Retention

Several providers offer stricter Zero Data Retention (ZDR) arrangements on request (OpenAI, Anthropic, xAI, Together AI). Each provider's default retention posture is the one stated in its row above — for example, Fireworks AI's row documents zero data retention by default per its published terms, confirmed in writing on September 8, 2026, and Baseten's row carries the zero-data-retention-by-default posture for its model APIs confirmed in writing on September 7, 2026. The table reflects the standard enterprise default that applies to gateway traffic today. Where ZDR has not been separately confirmed for our account, assume the standard retention window shown. If your organization requires ZDR on a specific provider, contact us.

What AI Reserve itself retains

Independently of the providers above, the AI Reserve gateway logs request metadata (model, token counts, cost, latency, status, and user/key attribution) to operate billing and spend governance. By default, the platform also stores prompt and response content to power chat history, chat search, and audit.

Usage classification (optional, per organization). When enabled, the platform categorizes AI spend by business function for the analytics dashboard by classifying the standing purpose of each API key and team from its name, description, and organizational context (details your organization sets itself, like team names, structure, and which user or team a key belongs to) — one internal model call per key or team when it is created or edited, not per request. Classification does not read prompt or response content. An earlier, retired version of this feature classified individual messages; text snapshots it captured stay inside the platform, are never used to train foundation models, and are included in every purge and deletion described below. Classification is off for newly created organizations until an administrator enables it, and administrators can turn it off entirely at any time.

Zero content retention (optional). Enterprise administrators can turn off content storage for their entire organization from the admin console ("Store prompt & response content"). While disabled, the platform persists no prompt or response text — only the billing metadata above is retained. Usage classification, which reads no message content, is governed by its own toggle above.

Deletion and retention windows. Previously stored content — prompt/response messages and the legacy classification snapshots above — can be permanently deleted on demand from the admin console, and administrators can set an automatic retention window (for example, 90 days) after which stored content is deleted on a schedule. Without a window, content is retained until deleted. When a user account is deleted, that user's stored content is deleted with it; when an organization is deleted, all of its stored content is deleted. Billing metadata is retained in each case. See our Terms of Service and Data Processing Addendum for the platform's retention commitments.

Organization instructions and context. Enterprise administrators can set organization-wide instructions (behavior and policy text) and organization-level context (shared knowledge such as company facts and terminology) that the gateway adds to the start of every conversation for every user in their organization, across web chat and API-key traffic. Both are off by default and opt-in per organization; while enabled, that content is sent to the AI model providers with every request. When active, users see a notice in the chat screen and can read the full text there.

Slack Connect customer channels

Separately from the model providers above, AI Reserve staff can create a Slack Connect shared channel with a customer organization from the AI Reserve admin console. When this is used, Slack Technologies (a Salesforce company) receives the customer admin's email address (used to send the Slack Connect channel invite), a shared channel named for the customer organization, and the messages participants choose to post in that shared channel; Slack also receives our operational alert payloads, which may reference customer organization names. For organizations that use the @aireserve mention agent in their Slack Connect channel, prompts submitted in Slack and the model completions returned there are Slack messages: they are processed and retained by Slack, and each side of the shared channel keeps its own copy under its own workspace retention settings (the customer's and AI Reserve's). Content sent through the API directly does not transit Slack. Slack is listed on the Subprocessors page.

Sources

Provider policy documents reviewed on July 23, 2026; DeepInfra, Novita AI, and Alibaba Cloud Model Studio entries reviewed and added on August 4, 2026; NVIDIA routing retired and the Nemotron models moved to DeepInfra on August 10, 2026; Alibaba image-generation (Qwen Image 3, Singapore) coverage added on August 11, 2026; Google Vertex AI and Baseten entries added on August 12, 2026 (listed ahead of first traffic; both serving production traffic since August 18, 2026); Hugging Face (Inference Endpoints) entry added on August 18, 2026 (GPU one-click deploys); Slack (Slack Connect customer channels) entry added on August 21, 2026 (admin-created shared channels with customer organizations) and broadened the same day for the @aireserve mention agent (prompts and model completions exchanged in Slack Connect channels); MuleRouter training-use, task-deletion, and serving-region entries completed on August 26, 2026 from written confirmations by the Alibaba Cloud International partner team (footnote 26) — written vendor confirmation rather than published terms, marked as such on the row. Baseten training-use and retention entries completed on September 7, 2026 from a written confirmation by Baseten (footnote 24) — written vendor confirmation rather than published terms, marked as such on the row; Baseten's serving region for our account remains pending verification. Fireworks AI training-use and retention entries corroborated on September 8, 2026 by a written confirmation from Fireworks AI (footnote 15) — published terms plus written vendor confirmation, marked as such on the row. Providers may update their terms; this page is reviewed periodically and updated when material changes are identified.

OpenAI — Business data privacy: https://openai.com/business-data/
OpenAI — Data controls in the OpenAI platform: https://developers.openai.com/api/docs/guides/your-data
Anthropic — How long do you store my organization's data?: https://privacy.claude.com/en/articles/7996866
Anthropic — API and data retention (Covered Models): https://platform.claude.com/docs/en/manage-claude/api-and-data-retention
AWS — Amazon Bedrock security, privacy & responsible AI: https://aws.amazon.com/bedrock/security-privacy-responsible-ai/
AWS — Amazon Bedrock data retention modes: https://docs.aws.amazon.com/bedrock/latest/userguide/data-retention.html
Google — Gemini API Additional Terms of Service: https://ai.google.dev/gemini-api/terms
Google — Gemini API abuse monitoring: https://ai.google.dev/gemini-api/docs/usage-policies
xAI — API security FAQ: https://docs.x.ai/developers/faq/security; Enterprise Terms of Service: https://x.ai/legal/terms-of-service-enterprise
Perplexity — Privacy & Security (Sonar API): https://docs.perplexity.ai/docs/resources/privacy-security
Perplexity — FAQ (hosting): https://docs.perplexity.ai/docs/resources/faq
DeepSeek — Privacy Policy: https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html
Moonshot AI — Kimi OpenPlatform Privacy Policy: https://platform.kimi.ai/docs/agreement/userprivacy
Together AI — Privacy Policy: https://www.together.ai/privacy; Privacy and security docs: https://docs.together.ai/docs/privacy-and-security
Fireworks AI — Zero Data Retention: https://docs.fireworks.ai/guides/security_compliance/data_handling; Privacy Policy: https://fireworks.ai/privacy-policy. Zero-data-retention-by-default posture confirmed in writing by Fireworks AI (September 8, 2026) for its inference API serving open models: prompts and outputs exist only in volatile memory for the duration of the request (with prompt caching, for a few minutes longer) and are never persisted; no training on customer data unless the customer explicitly opts in to a feature such as FireOptimizer; no sharing with external model providers (inference runs entirely on Fireworks infrastructure); only operational metadata (token counts, latency, errors) is logged, never content. Written vendor confirmation corroborating the published terms above. Scope note from those terms: Fireworks' separate Response API endpoint retains conversation data for 30 days when store=true (its default) — the gateway's Fireworks routes use Fireworks' chat-completions inference API, to which the zero-retention default applies.
OpenRouter — Data collection: https://openrouter.ai/docs/guides/privacy/data-collection; Zero Data Retention controls: https://openrouter.ai/docs/guides/features/zdr
NVIDIA — API Trial Terms of Service (§2–3): https://assets.ngc.nvidia.com/products/api-catalog/legal/NVIDIA API Trial Terms of Service.pdf
fal — API Services Terms: https://fal.ai/legal/api-services; Data Retention & Storage: https://fal.ai/docs/documentation/model-apis/media-expiration
DeepInfra — Data privacy: https://docs.deepinfra.com/account/data-privacy; Terms of Service: https://deepinfra.com/terms
Novita AI — Privacy Policy: https://novita.ai/legal/privacy-policy; Trust Center: https://trust.novita.ai/
Alibaba Cloud Model Studio — Security certifications and privacy notice: https://www.alibabacloud.com/help/en/model-studio/privacy-notice; Region and endpoint information: https://www.alibabacloud.com/help/en/model-studio/regions/
Mistral AI — Help center on training use: https://help.mistral.ai/en/articles/323757-do-you-use-my-user-data-to-train-your-artificial-intelligence-models; Privacy and data controls: https://docs.mistral.ai/admin/monitor-comply/privacy-data-controls; Data Processing Addendum: https://legal.mistral.ai/terms/data-processing-addendum
Google Cloud — Generative AI and data governance (Vertex AI): https://cloud.google.com/vertex-ai/generative-ai/docs/data-governance; Anthropic Claude models on Vertex AI: https://cloud.google.com/vertex-ai/generative-ai/docs/partner-models/use-claude
Baseten — Trust Center: https://trust.baseten.co/; Privacy Policy: https://www.baseten.co/privacy-policy/. Zero-data-retention-by-default posture confirmed in writing by Baseten (September 7, 2026): prompts and outputs sent through its model APIs are not retained, used for model training, or shared with external model providers. Written vendor confirmation, not yet reflected in Baseten's published documentation.
Hugging Face — Inference Endpoints security & compliance: https://huggingface.co/docs/inference-endpoints/security; Privacy Policy: https://huggingface.co/privacy
MuleRouter — confirmed in writing by the Alibaba Cloud International partner team (MuleRouter is an Alibaba Cloud–partnered platform): processing region Singapore (August 25, 2026); no request data retained for training, and AI Reserve holds the right to delete tasks run on MuleRouter (August 26, 2026). Written vendor confirmations, not yet reflected in MuleRouter's published documentation.