Security before sending, during AI processing and in storage
Separate safeguards before sending, during AI processing and in storage
AI providers do not train on or keep it
Your inputs aren't used to train AI models and aren't retained by the AI providers (zero data retention settings). Only approved providers through OpenRouter are used; otherwise the request stops.
Google sign-in and workspace roles. Support access has approval settings, a reason, a two-hour limit and logs. Deletion certificates and explicit consent. Follow your organization’s information policies.
Review the data flowData flow
| Processing / provider | Location | Data and controls |
|---|---|---|
| Your browser | Your device | Review the text being sent. Do not enter personal information. |
| OpenRouter → Anthropic / Azure / Google | USA | Plan text and analysis instructions. Account details are not added to AI inputs. Providers do not train on or retain the inputs (zero data retention settings). |
In our own browser network tests, only masked text was sent. This is not a third-party certification and does not guarantee every input is masked. We make no claims about encryption at rest, security certifications or incident response beyond what is stated on this page.
Request our security questionnaire answers
- Encryption in transit
- All traffic is encrypted with HTTPS (TLS).
- Where data goes
- Inputs are sent via OpenRouter, Inc. to US AI providers to generate strategies. Inputs are routed only to providers that do not train on your data and do not retain it after processing (zero data retention). If no such provider is available for a model, the run stops with an error instead. See the subprocessor list.
- Access control
- Data is isolated per workspace with database row-level security; roles (owner, admin, member, viewer) limit what each person can do. API and payment keys stay on our servers and are never sent to your browser.
- Support access
- Operator support access is read-only, needs a stated reason, ends after at most 2 hours, shows you a banner, and every screen viewed is recorded in your activity log. You can require your approval before any support access.
- Retention and deletion
- Free-review text is deleted within 24 hours and results expire after 14 days. Set auto-deletion after N days per workspace; workspace deletion becomes permanent 30 days after you request it, and we can issue a deletion certificate.
- Abuse protection
- Public forms are rate-limited.
- Personal data
- Please do not enter personal data. Likely personal details are masked automatically before sending, and you review the preview. Analytics cookies load only after you consent.
- Sign-in
- Sign in with Google accounts.
Subprocessors · Privacy · Writing without personal data
Start with a free review
Upload a plan or proposal and get the top 5 weaknesses, objections by stakeholder, and a 0–100 readiness score.
Try the free review