Security before sending, during AI processing and in storage

Separate safeguards before sending, during AI processing and in storage

  1. AI providers do not train on or keep it

    Your inputs aren't used to train AI models and aren't retained by the AI providers (zero data retention settings). Only approved providers through OpenRouter are used; otherwise the request stops.

Google sign-in and workspace roles. Support access has approval settings, a reason, a two-hour limit and logs. Deletion certificates and explicit consent. Follow your organization’s information policies.

Review the data flow

Data flow

Processing / providerLocationData and controls
Your browserYour deviceReview the text being sent. Do not enter personal information.
OpenRouter → Anthropic / Azure / GoogleUSAPlan text and analysis instructions. Account details are not added to AI inputs. Providers do not train on or retain the inputs (zero data retention settings).

In our own browser network tests, only masked text was sent. This is not a third-party certification and does not guarantee every input is masked. We make no claims about encryption at rest, security certifications or incident response beyond what is stated on this page.

Request our security questionnaire answers

Encryption in transit
All traffic is encrypted with HTTPS (TLS).
Where data goes
Inputs are sent via OpenRouter, Inc. to US AI providers to generate strategies. Inputs are routed only to providers that do not train on your data and do not retain it after processing (zero data retention). If no such provider is available for a model, the run stops with an error instead. See the subprocessor list.
Access control
Data is isolated per workspace with database row-level security; roles (owner, admin, member, viewer) limit what each person can do. API and payment keys stay on our servers and are never sent to your browser.
Support access
Operator support access is read-only, needs a stated reason, ends after at most 2 hours, shows you a banner, and every screen viewed is recorded in your activity log. You can require your approval before any support access.
Retention and deletion
Free-review text is deleted within 24 hours and results expire after 14 days. Set auto-deletion after N days per workspace; workspace deletion becomes permanent 30 days after you request it, and we can issue a deletion certificate.
Abuse protection
Public forms are rate-limited.
Personal data
Please do not enter personal data. Likely personal details are masked automatically before sending, and you review the preview. Analytics cookies load only after you consent.
Sign-in
Sign in with Google accounts.

Subprocessors · Privacy · Writing without personal data

Start with a free review

Upload a plan or proposal and get the top 5 weaknesses, objections by stakeholder, and a 0–100 readiness score.

Try the free review