Drivers of sovereign AI
Sovereign AI is driven by two converging forces:Regulatory Compliance
Regulations like the EU AI Act, GDPR, and sector-specific rules (healthcare, finance, defense) impose strict requirements on where data can be processed and stored. Organizations operating across jurisdictions need infrastructure that respects these boundaries.Data Residency and Privacy
Sensitive data (whether personal, financial, or classified) may not legally or ethically leave a particular jurisdiction. Sovereign AI ensures that prompts and completions are processed entirely within a designated region, with no cross-border data transfers.How OpenRouter Enables Sovereign AI
OpenRouter provides several features that enable sovereign AI deployments today, allowing enterprises to maintain control over where their AI workloads are processed.In-Region Routing
For enterprise customers, OpenRouter supports in-region routing in the EU and the US. When enabled, your requests are guaranteed to only be decrypted within the designated region, and are only routed to providers operating in that region. This means prompts and completions are processed entirely within that region. They never leave it at any point in the request lifecycle. To use in-region routing, send API requests through the region-specific base URL:In-region models listTo see which models are available for in-region routing, you can:
- Call
/api/v1/modelsthrough the EU domain to get the full list programmatically, or pass aregionquery parameter (euorus) on the main domain - Browse EU-eligible models or US-eligible models on the models page with the In-Region Routing filter
Zero Data Retention (ZDR)
Zero Data Retention ensures that providers do not store your prompts or responses. This is a key component of sovereign AI, as it guarantees that no data persists outside your control after a request completes. ZDR can be enforced per model group (Anthropic, OpenAI, Google, SpaceXAI, and non-frontier) in your privacy settings, via guardrails, or per-request:Data Collection Controls
Control whether providers can collect your data with thedata_collection parameter:
"deny", your requests are only routed to providers that do not collect user data. This can also be configured as an account-wide default in your privacy settings.
Building a Sovereign AI Stack with OpenRouter
Combining these features, you can build a fully sovereign AI deployment:- Enable in-region routing to keep all data within the EU or the US
- Enforce ZDR to prevent any data retention by providers
- Deny data collection to prevent training on your data
Getting Started
Sovereign AI features are available to all OpenRouter users, with in-region routing (EU or US) available for enterprise customers. To get started:- Create an API key and start using provider routing to control where your requests are processed
- Enable ZDR and data collection controls for privacy compliance
- Contact our enterprise team to enable in-region routing and discuss additional sovereign AI requirements