@trosso19 your trust is transitive there, because openrouter hands the request to a downstream provider and the zero retention flag only covers the ones who signed up for it. that provider still terminates tls and reads your plaintext, so retention is a policy promise rather than a property you can check. if it matters, pin the route to one provider you actually have a contract with, or run the model locally.