# OpenRouter

OpenRouter declares [16 subprocessors](https://thirdpartyindex.com/vendors/openrouter#subprocessors) in [its subprocessor list](https://trust.openrouter.ai/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/2814)). They include [OpenAI](https://thirdpartyindex.com/vendors/openai), [Stripe](https://thirdpartyindex.com/vendors/stripe) and [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare). No published changes since we first read it on 2026-09-22. [68 tracked vendors](https://thirdpartyindex.com/vendors/openrouter#used-by) name OpenRouter as a subprocessor, including [Together AI](https://thirdpartyindex.com/vendors/together-ai), [Upstash](https://thirdpartyindex.com/vendors/upstash) and [Fly.io](https://thirdpartyindex.com/vendors/fly-io).

OpenRouter (openrouter.ai): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/openrouter
- Documents last verified: 2026-11-11
- Transparency rating: 90/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 15 tracked vendors directly, 125 within two hops, 458 within three; 68 tracked vendors rely on it directly, 223 within two hops, 1734 within three
- Cite as: OpenRouter, Third Party Index, https://thirdpartyindex.com/vendors/openrouter (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.openrouter.ai/ | 2026-11-11 | 2026-09-21 |
| Subprocessor list | https://trust.openrouter.ai/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57 | 2026-11-11 | 2026-09-22 |
| Data processing addendum | https://trust.openrouter.ai/?itemUid=c4223a81-5840-4e11-ac9f-2b812794a67e&source=click | 2026-11-11 | 2026-09-21 |
| Privacy policy | https://openrouter.ai/privacy | 2026-11-11 | 2026-10-20 |
| Terms | https://openrouter.ai/terms | 2026-11-11 | 2026-10-20 |
| security.txt | https://openrouter.ai/.well-known/security.txt | 2026-11-11 | 2026-10-27 |
| Status page | https://status.openrouter.ai/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (16)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Clerk](https://thirdpartyindex.com/vendors/clerk.md) | Authentication | United States | 2026-09-22 |
| [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse.md) | Database | United States | 2026-09-22 |
| [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | Cloud Infrastructure | United States | 2026-09-22 |
| Coinbase | Payments | United States | 2026-09-22 |
| [Customer.io](https://thirdpartyindex.com/vendors/customer-io.md) | Email Notifications | United States | 2026-09-22 |
| [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | Observability | United States | 2026-09-22 |
| [Fivetran](https://thirdpartyindex.com/vendors/fivetran.md) | Integrations | United States | 2026-09-22 |
| [GitHub](https://thirdpartyindex.com/vendors/github.md) | Version Control | United States | 2026-09-22 |
| [OpenAI](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | Inference | United States | 2026-09-22 |
| [PostHog](https://thirdpartyindex.com/vendors/posthog.md) | Analytics | United States | 2026-09-22 |
| [Pylon](https://thirdpartyindex.com/vendors/pylon.md) | Customer Support | United States | 2026-09-22 |
| [Resend](https://thirdpartyindex.com/vendors/resend.md) | Email Notifications | United States | 2026-09-22 |
| [Stripe](https://thirdpartyindex.com/vendors/stripe.md) | Payments | United States | 2026-09-22 |
| [Upstash](https://thirdpartyindex.com/vendors/upstash.md) | Cache | United States | 2026-09-22 |
| [Vercel](https://thirdpartyindex.com/vendors/vercel.md) | Website Hosting | United States | 2026-09-22 |
| [Zendesk®](https://thirdpartyindex.com/vendors/zendesk.md) | Customer Support | United States | 2026-09-22 |

Read from ([evidence](https://thirdpartyindex.com/evidence/2814)). CSV: https://thirdpartyindex.com/vendors/openrouter/subprocessors.csv

AI model providers (or a cloud provider's AI model service) among these entries: 1. All vendors that list one: https://thirdpartyindex.com/ai

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/1710))

## Web Technologies

OpenRouter's homepage made 173 requests to 8 domains, and 3 services controlled by another company. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

3 third parties by category: Analytics 2 (Google Cloud, Cloudflare); Authentication 1 (reviewed: Clerk). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (3)

- Google Cloud: 19 requests to gstatic.com, googletagmanager.com, doubleclick.net, google.com; Google Analytics, Google Tag Manager
- Clerk: 12 requests to clerk.com (its subprocessor list names it too)
- Cloudflare: 4 requests to cloudflare.com, cloudflareinsights.com; Cloudflare Browser Insights (its subprocessor list names it too)

### First party (1)

- OpenRouter: 138 requests to openrouter.ai; Clerk 6.41.0, Cloudflare, Cloudflare Turnstile, HSTS, HTTP/3, Lucide, Next.js 16.4.2, Next.js App Router, Open Graph, PWA, Priority Hints, React, Statsig 3.33.5, Turbopack, Vercel, Webpack, Datadog

1 tracked company loaded by the homepage is not in OpenRouter's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (68)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Aaru](https://thirdpartyindex.com/vendors/aaru.md): Engineering; LLM routing / inference gateway
- [Activepieces](https://thirdpartyindex.com/vendors/activepieces.md)
- [AiSDR](https://thirdpartyindex.com/vendors/aisdr.md): Application AI Functionality (customer optional)
- [Anaconda](https://thirdpartyindex.com/vendors/anaconda.md): Routes AI model requests and related data
- [Arcade](https://thirdpartyindex.com/vendors/arcade.md): Artificial intelligence; Routing of requests to supported third-party language and vision models for copy generation, Brand Kit workflows, and asset analysis.
- [Arrows](https://thirdpartyindex.com/vendors/arrows.md): Backend support of AI-powered functionality; Routing layer for LLM API requests
- [Asa Team](https://thirdpartyindex.com/vendors/asa-team.md): AI gateway that routes requests to the selected upstream model provider for the Asa assistant and Project Intelligence.
- [Ceros](https://thirdpartyindex.com/vendors/ceros.md): AI Traffic Routing; Relevant Customer Data: AI Features are optional and may be disabled by customers. When AI Features are disabled, Openrouter will not proces…
- [Chatbase.co](https://thirdpartyindex.com/vendors/chatbase-co.md)
- [Chatwoot](https://thirdpartyindex.com/vendors/chatwoot.md): AI model services; Used to route AI requests to supported language models for Chatwoot AI features.
- [Check Point Software Technologies](https://thirdpartyindex.com/vendors/check-point-software-technologies.md): LLM routing and inference services
- [CodeSignal](https://thirdpartyindex.com/vendors/codesignal.md): AI / LLM (Routing); LLM routing gateway for skill-evaluation features.
- [Colossyan Creator](https://thirdpartyindex.com/vendors/colossyan-creator.md): AI models; Openrouter provides robust security guarantees when accessing generative AI models. It also provides access to a broader catalog of high-performance …
- [Composio](https://thirdpartyindex.com/vendors/composio.md): Provides an API gateway for accessing third-party AI models and managing usage. When Composio sends prompts through OpenRouter, OpenRouter routes those requests…
- [ContactMonkey](https://thirdpartyindex.com/vendors/contactmonkey.md): Model routing for AI features (opt-in).
- [ConvertFlow](https://thirdpartyindex.com/vendors/convertflow.md): AI model routing, request handling, and API gateway services
- [Datalab](https://thirdpartyindex.com/vendors/datalab-to.md): Routes third-party LLM inference to Google and OpenAI, with Anthropic as a fallback, for customers without a signed BAA. May transiently process document conten…
- [DecoverHQ](https://thirdpartyindex.com/vendors/decoverhq.md): Routing layer used to access additional supported AI models
- [Descript](https://thirdpartyindex.com/vendors/descript.md)
- [DeveloperHub](https://thirdpartyindex.com/vendors/developerhub.md): Artificial Intelligence
- [Easol](https://thirdpartyindex.com/vendors/easol.md)
- [Enlyft](https://thirdpartyindex.com/vendors/enlyft.md): AI model routing
- [Ethos](https://thirdpartyindex.com/vendors/ethos.md): Artificial intelligence model gateway and routing
- [Featurebase](https://thirdpartyindex.com/vendors/featurebase-molecula-corp.md): AI model routing (data retention off)
- [Fly.io](https://thirdpartyindex.com/vendors/fly-io.md): AI model routing for internal tooling
- [Funnelfeedr](https://thirdpartyindex.com/vendors/funnelfeedr.md): AI provider. Requests are restricted to vetted EU/US endpoints with data collection disabled; Customer Data is not stored or used for model training. https://op…
- [Gleap](https://thirdpartyindex.com/vendors/gleap.md): gateway for the AI model requests of both regions. Gleap sends its requests for Claude, GPT, Gemini, Grok, Kimi, GLM, DeepSeek, Mistral and other models to Open…
- [Gravity](https://thirdpartyindex.com/vendors/gravity.md): AI model routing
- [Hasura](https://thirdpartyindex.com/vendors/hasura.md)
- [HeyOrca!](https://thirdpartyindex.com/vendors/heyorca.md)
- [Imagicle Spa](https://thirdpartyindex.com/vendors/imagicle-spa.md)
- [InCountry](https://thirdpartyindex.com/vendors/incountry.md): LLMs provider
- [Kaltura](https://thirdpartyindex.com/vendors/kaltura.md): AI Gateway
- [Knoku](https://thirdpartyindex.com/vendors/knoku.md): IT infrastructure
- [LightTable](https://thirdpartyindex.com/vendors/lighttable.md): AI model routing (failover for direct model providers)
- [Lorikeet](https://thirdpartyindex.com/vendors/lorikeet.md): Provides LLM inference services on a ZDR and no-model-training basis.
- [Lovable](https://thirdpartyindex.com/vendors/lovable.md): LLM inference routing
- [Lumerate](https://thirdpartyindex.com/vendors/lumerate.md): Unified API gateway for large language model (LLM) inference and routing
- [Maileroo](https://thirdpartyindex.com/vendors/maileroo.md): LLM API services
- [Mida](https://thirdpartyindex.com/vendors/mida.md): AI model gateway for the AI features of the Services. Requests are routed only to model provider endpoints that have a zero data retention policy, and OpenRoute…
- [Mintlify](https://thirdpartyindex.com/vendors/mintlify.md): LLM Provider
- [Netlify](https://thirdpartyindex.com/vendors/netlify.md): AI Services; AI services: model routing platform providing unified API access to large language models from multiple providers.
- [OptiSigns](https://thirdpartyindex.com/vendors/optisigns.md): AI Model Gateway
- [Orderful](https://thirdpartyindex.com/vendors/orderful.md): AI model routing / proxy
- [Parahelp](https://thirdpartyindex.com/vendors/parahelp.md): Unified API access to third-party AI models
- [Periskope](https://thirdpartyindex.com/vendors/periskope.md): AI model routing and AI-enabled response generation where AI features are enabled.
- [Pilosa](https://thirdpartyindex.com/vendors/pilosa.md): AI model routing (data retention off)
- [Pin](https://thirdpartyindex.com/vendors/pin.md): Load distribution and high availability for AI models
- [Pipeline CRM](https://thirdpartyindex.com/vendors/pipeline-crm.md): AI; Routes Copilot requests to OpenAI. Not used for training; routing to providers that train on data is disabled. Retention: prompts and responses are not stor…
- [Plug and AI](https://thirdpartyindex.com/vendors/plug-and-ai.md): Gateway to AI model providers — message content is transmitted here and routed onward to the selected model provider
- [Preset](https://thirdpartyindex.com/vendors/preset.md): to selected LLM providers).
- [Reducto](https://thirdpartyindex.com/vendors/reducto.md): Customer document/content subprocessor; may receive documents, document-derived content, prompts, schemas, or model inputs and outputs when configured.
- [Relevance AI](https://thirdpartyindex.com/vendors/relevance-ai.md): AI Models; Engineering
- [replit](https://thirdpartyindex.com/vendors/replit.md)
- [SalesBlink](https://thirdpartyindex.com/vendors/salesblink.md): Model routing for AI generation and assistant features
- [Siit](https://thirdpartyindex.com/vendors/siit.md): Artificial Intelligence
- [SmartTask](https://thirdpartyindex.com/vendors/smarttask.md): LLM routing and aggregation for AI-powered features
- [Stability AI](https://thirdpartyindex.com/vendors/stability-ai.md)
- [Stacksync](https://thirdpartyindex.com/vendors/stacksync.md): AI inference provider
- [Steady](https://thirdpartyindex.com/vendors/steady.md): LLM inference routing
- [Testlio](https://thirdpartyindex.com/vendors/testlio.md): AI routing gateway for LeoCore’s AI features. Zero data retention enforced; providers that train on data are excluded.; AI services
- [TimeCamp](https://thirdpartyindex.com/vendors/timecamp.md): Routes AI prompts and returns model outputs
- [Todoist](https://thirdpartyindex.com/vendors/todoist.md): AI Routing Service; Routes Automations AI requests to the approved model providers listed below | AI Data Retention: Zero-data-retention routing enforced accoun…
- [Together AI](https://thirdpartyindex.com/vendors/together-ai.md): AI model routing and aggregation
- [Town](https://thirdpartyindex.com/vendors/town.md): Model routing and inference for supported LLM requests.
- [Upstash](https://thirdpartyindex.com/vendors/upstash.md)
- [Writer](https://thirdpartyindex.com/vendors/writer.md): Infrastructure
- [ZeroClick](https://thirdpartyindex.com/vendors/zeroclick.md): LLM routing and inference

## Incidents reported by OpenRouter's subprocessors

Incidents reported in the last 30 days on their own status pages by 10 vendors OpenRouter lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-12: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported GPT-image-2.5 and 2.6 Sunburst & Flare High error rate (minor)
- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical)
- 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Impact across multiple GitHub products including Actions, Pages, and Copilot products. (critical)
- 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor)
- 2026-11-11: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Incident with Webhooks (minor)
- 2026-11-11: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which OpenRouter lists as a subprocessor, reported Provisioning and scaling operations may take longer in AWS ap-northeast-1 Tokyo (minor)
- 2026-11-11: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which OpenRouter lists as a subprocessor, reported Slack Integration Connection Issues (major)
- 2026-11-10: [Vercel](https://thirdpartyindex.com/vendors/vercel#status), which OpenRouter lists as a subprocessor, reported Elevated Sandbox and Blob request latency and errors (minor)
- 2026-11-10: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Incident with Git Operations and Pull Requests (critical)
- 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Degraded availability for GPT-5.3 Codex and GPT-5.6 models in Copilot (major)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Elevated Errors On API (minor)
- 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Incident with Actions and Checks API (critical)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Incident with Webhooks and Actions (major)
- 2026-11-09: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Increased timeouts due to surge in anonymous users (minor)
- 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Elevated errors with image generation (minor)
- 2026-11-08: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Increase in timeouts for some unauthenticated users (minor)
- 2026-11-06: [Customer.io](https://thirdpartyindex.com/vendors/customer-io#status), which OpenRouter lists as a subprocessor, reported Customers are Unable to add new Email Sending Domains (major)
- 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated)
- 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Degraded performance for multiple GitHub services (minor)
- 2026-11-05: [Vercel](https://thirdpartyindex.com/vendors/vercel#status), which OpenRouter lists as a subprocessor, reported Build delays and degraded Vercel Dashboard performance (minor)
- 2026-11-05: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Incident with Actions (minor)
- 2026-11-05: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which OpenRouter lists as a subprocessor, reported Delay in Analytics Data (minor)
- 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor)
- 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Incident with Actions (major)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Incident with Actions and Pages (major)
- 2026-11-04: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which OpenRouter lists as a subprocessor, reported Inbound Email Delays (minor)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Incident with Pull Requests, Git Operations and Issues (major)
- 2026-11-04: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Increased task-related errors for Copilot Mission Control (minor)
- 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Incident with Git Operations (minor)
- 2026-11-03: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Incident with API, Git, and Copilot requests (minor)
- 2026-11-03: [Clerk](https://thirdpartyindex.com/vendors/clerk#status), which OpenRouter lists as a subprocessor, reported Elevated error rates for authentication requests (minor)
- 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported File upload errors in ChatGPT (minor)
- 2026-11-02: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Elevated errors on GPT-5.4 Nano (minor)
- 2026-11-02: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which OpenRouter lists as a subprocessor, reported SQL Console database connection outage (minor)
- 2026-11-01: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenRouter lists as a subprocessor, reported Elevated Instant Payouts failures (no impact stated)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Incident with Dependabot (minor)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Incident with Actions, Pages, and Webhooks (major)
- 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor)
- 2026-10-30: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Disruption with GitHub services (critical)
- 2026-10-29: [Clerk](https://thirdpartyindex.com/vendors/clerk#status), which OpenRouter lists as a subprocessor, reported SMS Delivery Issues (major)
- 2026-10-29: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Disruption with Copilot Cloud services (minor)
- 2026-10-28: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenRouter lists as a subprocessor, reported Elevated Issuing errors from 17:13 - 20:41 UTC (minor)
- 2026-10-28: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which OpenRouter lists as a subprocessor, reported Metrics query are disrupted (major)
- 2026-10-28: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Disruption with some Copilot services (critical)
- 2026-10-27: [Customer.io](https://thirdpartyindex.com/vendors/customer-io#status), which OpenRouter lists as a subprocessor, reported Customer.io UI is currently unavailable for some customers (minor)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor)
- 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated)
- 2026-10-27: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Elevated 404s for GitHub App s2s tokens in git/API (no impact stated)
- 2026-10-26: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Incident with Actions, Issues, API Requests and Pull Requests (minor)
- 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor)
- 2026-10-26: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which OpenRouter lists as a subprocessor, reported Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder (major)
- 2026-10-26: [Resend](https://thirdpartyindex.com/vendors/resend#status), which OpenRouter lists as a subprocessor, reported Delayed email status updates (minor)
- 2026-10-24: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenRouter lists as a subprocessor, reported Elevated Blik errors (no impact stated)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Grok 4.6 and Grok 4.7 Service Issues (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated)
- 2026-10-23: [Vercel](https://thirdpartyindex.com/vendors/vercel#status), which OpenRouter lists as a subprocessor, reported Delays in Logs and Observability data (minor)
- 2026-10-23: [Resend](https://thirdpartyindex.com/vendors/resend#status), which OpenRouter lists as a subprocessor, reported Intermittent latency spikes on our emails API (minor)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Disruption with Dependabot Alerts (minor)
- 2026-10-23: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Delayed Actions status check results (minor)
- 2026-10-23: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which OpenRouter lists as a subprocessor, reported Degraded support ticket submission and response (minor)
- 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Delays in customer support responses (no impact stated)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenRouter lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor)
- 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Project updates delayed (minor)
- 2026-10-22: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenRouter lists as a subprocessor, reported Elevated Bancontact errors (no impact stated)
- 2026-10-22: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Incident with Actions (minor)
- 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor)
- 2026-10-21: [Clerk](https://thirdpartyindex.com/vendors/clerk#status), which OpenRouter lists as a subprocessor, reported Issues with Documentation "Ask AI" (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Authentication errors for some users (major)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor)
- 2026-10-21: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Delays for Pull Requests and Webhook deliveries (critical)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor)
- 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenRouter lists as a subprocessor, reported Spike in cancellations and expired errors with PayByBank payments (no impact stated)
- 2026-10-20: [ClickHouse](https://thirdpartyindex.com/vendors/clickhouse#status), which OpenRouter lists as a subprocessor, reported Google Cloud Outage (minor)
- 2026-10-20: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenRouter lists as a subprocessor, reported Elevated Revolut Pay errors (no impact stated)
- 2026-10-19: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported Degraded availability for GitHub Actions, GitHub Pages and Webhooks (critical)
- 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported File Download errors (minor)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenRouter lists as a subprocessor, reported Elevated declines on Mastercard (no impact stated)
- 2026-10-15: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported CCA Automations are delayed when starting an Automation (minor)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenRouter lists as a subprocessor, reported Elevated declines on Visa (no impact stated)
- 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Widespread feature degradation (major)
- 2026-10-15: [Stripe](https://thirdpartyindex.com/vendors/stripe#status), which OpenRouter lists as a subprocessor, reported Elevated Amazon Pay errors (no impact stated)
- 2026-10-14: [Pylon](https://thirdpartyindex.com/vendors/pylon#status), which OpenRouter lists as a subprocessor, reported Platform loading issues (no impact stated)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor)
- 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which OpenRouter lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor)
- 2026-10-13: [GitHub](https://thirdpartyindex.com/vendors/github#status), which OpenRouter lists as a subprocessor, reported \[Retroactive\] Actions workflow run logs delayed (minor)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/openrouter

## Security contact

From its security.txt (https://openrouter.ai/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/165278)):

- Contact: mailto:security@openrouter.ai
- Encryption key: https://openrouter.ai/pgp-key.txt
- Languages: en
- Valid until 2027-08-12

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api
