Openrouter is very transparent about where your requests are going. Every single one is logged.
You decide the routing if you want.
I trust it because there are at least 7 billion on the line. If it came out that they were violating their contract and sending company secrets to China when they promised they won’t, they would lose literal billions for basically no gain, and possible criminal charges.
Why on earth would you think they are sending data to China after you click that toggle when they have every reason not to?
As a QA engineer with over 30 years of identifying software regressions, I would assume that data would eventually get sent to China even if you click that toggle. One ambitious intern or new hire is all it takes, especially in an age of agent-generated code and 1K+ line PRs.
With that logic you shouldnt even deploy to the cloud at all. Someone in AWS can also accidentally share an S3 bucket with backups to the whole internet, there are plenty of precedents for that