OpenRouter's US endpoint rejects any request it cannot decrypt and serve in-country

The guarantee is cheap for OpenRouter to make, because the router already makes the choice it is now constraining. It picks which provider endpoint serves each request, one request at a time, which is how a router sends easy jobs to cheap models and saves the pricier frontier systems for work that needs them ^[11]. The US guarantee filters that candidate set down to endpoints operating inside the country ^[10].

"Decrypted" is the important word in the promise. OpenRouter says requests to its US endpoint are decrypted, processed and served entirely inside the country ^[1]. That puts TLS termination in scope, so the plaintext prompt and the plaintext completion exist only on US infrastructure.

Open-weight models take around 60% of the tokens consumed by US-originating requests, and OpenRouter says Chinese models are most of that share ^[4]. Majority means more than half, so weights from Chinese labs are serving upwards of 30% of the tokens on US-originating requests through that platform ^[6]. That 60% counts traffic through OpenRouter. It is not a census of enterprise inference. A marketplace whose selling point is switching models per request to cut cost will over-represent price-driven selection ^[11].

Cailee Moberg of OpenRouter's product team wrote in Wednesday's post announcing the feature that models from Chinese labs are still most of the open-weight model volume, and that procurement approval for those models can be difficult ^[8][9]. Moberg also notes that US-developed models from Nvidia and Thinking Machines are feeding the same open-weight growth ^[9].

Difficult procurement approval contains two separate objections. One is where the data is processed, and the US endpoint answers that. The other is what the weights can do: OpenAI president Greg Brockman recently warned that increasingly capable open-weight models, pointing specifically to China's GLM-5.3, could "significantly accelerate the threat landscape" as models with advanced cyber capabilities become freely downloadable and modifiable ^[12].

The company has run the same control in Europe for longer, saying European in-region routing has been available since October 2025 ^[3]. OpenRouter did not explain how a customer audits the US guarantee from outside. Deloitte's 2026 State of AI in the Enterprise report concluded that sovereign AI was on the rise, and put at 77% the share of companies now factoring country into the decision ^[13].