Compliance
First what you may use, then what's best
For companies, where data lives and what the provider does with it often decides before accuracy does. Filter for the models your legal team will approve.
10 of 10 models match
| Model | In the EU | No retention (ZDR) | DPA | Open weights | How to comply | Source |
|---|---|---|---|---|---|---|
| Claude Sonnet 5 Anthropic | yes | yes | yes | no | EU: Amazon Bedrock eu-west-1, Google Vertex europe. ZDR: Bedrock, Vertex. | OpenRouter ↗DPA ↗ |
| DeepSeek V4.1 Flash DeepSeek | no | yes | no | yes | DeepSeek's own API: no DPA in its terms, data stored in China. ZDR via third-party hosts on OpenRouter; self-hosting in the EU possible. | OpenRouter ↗DPA ↗ |
| Gemini 3.5 Flash Lite | yes | yes | yes | no | EU: Google Vertex EU. ZDR: Google. | OpenRouter ↗DPA ↗ |
| Gemini 3.8 Flash | no | yes | yes | no | OpenRouter: Google global endpoints only (no EU endpoint listed). ZDR: Google. | OpenRouter ↗DPA ↗ |
| Gemma 4 31B | no | yes | not verified | yes | Served only by third-party hosts on OpenRouter (no EU endpoint listed); self-hosting in the EU possible. | OpenRouter ↗ |
| GPT-6 Luna OpenAI | yes | yes | yes | no | EU and ZDR: Azure. OpenAI direct: EU data residency needs approval. | OpenRouter ↗DPA ↗ |
| GPT-6 Sol OpenAI | yes | yes | yes | no | EU and ZDR: Azure. OpenAI direct: EU data residency needs approval. | OpenRouter ↗DPA ↗ |
| Mistral Medium 3.5 Mistral | yes | yes | yes | no | EU and ZDR: Mistral. Mistral hosts data in the EU by default. | OpenRouter ↗DPA ↗ |
| Mistral Small 4 Mistral | yes | yes | yes | yes | EU and ZDR: Mistral. Mistral hosts data in the EU by default. | OpenRouter ↗DPA ↗ |
| Qwen3.8 Flash Qwen | no | no | yes | no | Only provider on OpenRouter: Alibaba (no EU or ZDR endpoint). DPA: general Alibaba Cloud International DPA. | OpenRouter ↗DPA ↗ |
Models that don't match stay greyed out so you can see what you give up. Verified: September 27, 2026.
How to read this: “Processing in the EU” and “Zero data retention” mean OpenRouter offers a provider with an EU endpoint, or with zero data retention (ZDR), for the model. “DPA” is the data processing agreement offered by the model vendor. Open weights means you can run the model on your own servers, for example in the EU. EU in-region routing on OpenRouter itself requires a Business or Enterprise plan.
Information, not legal advice. Provider terms change; verify at the source before you deploy.