Qwen, GLM, Kimi & DeepSeek APIs Hosted on US Infrastructure
Use Qwen, GLM, Kimi, and DeepSeek through US-hosted attested infrastructure. Prompts never reach the model vendor, and you can verify that live.
Run GLM, Qwen, Kimi, and DeepSeek on US-hosted, attested infrastructure that never forwards a prompt to the model vendor.
Your benchmarks already picked these models. GLM-5.2, Qwen 3.5, Kimi K2.7, and DeepSeek V4 Pro all run as routes here, alongside MiniMax M3. Then legal asks where the API traffic goes. A vendor-hosted endpoint sends every prompt to the model vendor's servers, and self-hosting the weights means running your own GPUs.
There is a middle path. TrustedRouter serves the same open weights via non-Chinese hosting providers inside a hardware-attested confidential-compute gateway, with Zero-Data-Retention and TEE tiers per route. TrustedRouter never logs prompt or output content. Ordinary synchronous and streaming inference does not retain it. The opt-in Batch API temporarily retains enclave-encrypted artifacts for up to 30 days. The API is OpenAI-compatible, and EU-focused routing is available.
from openai import OpenAI
client = OpenAI(
base_url="https://api.trustedrouter.com/v1",
api_key="sk-tr-...", # your TrustedRouter key
)
reply = client.chat.completions.create(
model="glm-5.2", # also: qwen-3.5, kimi-k2.7,
# deepseek-v4-pro
messages=[{"role": "user",
"content": "Refactor this handler."}],
)Prompts skip the vendor
DeepSeek, Kimi, Qwen, GLM, and MiniMax routes run on attested infrastructure operated by non-Chinese hosting providers. On the TEE tier, end-to-end confidential compute means even the hosting provider cannot read your prompt. Kimi users can start at the dedicated Kimi K2 API page.
Check it live, per session
The gateway source is open, the image digest is published, and the attestation endpoint returns a JWT signed by the CPU vendor's root key, bound to your live TLS session. Attestation beats a privacy policy. Details and the curl command are on the security page.
Hosting fixes residency
Routing changes where your data goes. The labs that trained these weights stay the same, so judge the models on quality like any other route. Your prompts stay on attested infrastructure you can verify, without renting GPUs to self-host. The full directory of Chinese labs and the operator jurisdiction of every route is on Chinese AI models.
Same weights, different host, different answers.
We ran 60 sensitive questions against the same GLM weights through two doors. The vendor-hosted API answered 30 of 60. TrustedRouter's attested enclave answered 60 of 60. That filtering is host-applied: it lives in the serving stack rather than in the weights you benchmarked.
Where a model is hosted decides what leaves your building and what comes back. Privacy you can check beats privacy you're promised. A document-processing company scaled from zero to over a billion tokens per week through the attested gateway within three weeks of onboarding. Pick a route in the model chooser, or open the playground and test your own prompts against a US-hosted GLM, Qwen, Kimi, or DeepSeek route right now.
Current routes, prices, privacy, and measured performance.
Catalog facts come from the routes currently configured in TrustedRouter. Performance uses the same cached metadata snapshot as the public leaderboard. Prompts and outputs are not part of these measurements.
| Model | Providers | Context | Input | Output | Privacy | Measured route |
|---|---|---|---|---|---|---|
DeepSeek: DeepSeek V4 Flash 0731deepseek/deepseek-v4-flash-0731 |
+19
|
1,048,576 | $0.047475/1M to $2.11/1M | $0.09495/1M to $10.55/1M | ZDR | 1944 ms TTFT deepseek · 152 tok/s · 95.75% available · n=942 |
GLM 5.2 Fast on Fireworksz-ai/glm-5.2-fast |
|
1,048,576 | $2.2155/1M | $6.963/1M | ZDR | measured fireworks · 90 tok/s · 100.00% available · n=230 |
MoonshotAI: Kimi K3moonshotai/kimi-k3 |
+19
|
1,048,576 | $2.05725/1M to $4.22/1M | $10.28625/1M to $21.1/1M | E2EE | 9270 ms TTFT kimi · 35 tok/s · 98.17% available · n=191 |
MiniMax: MiniMax M3minimax/minimax-m3 |
+10
|
524,288 | $0.24265/1M to $2.11/1M | $1.0128/1M to $10.55/1M | ZDR 4 cited scores | 1356 ms TTFT together · 135 tok/s · 98.35% available · n=159 |
Z.ai: GLM 5.3z-ai/glm-5.3 |
+19
|
1,048,576 | $1.0339/1M to $5.1273/1M | $3.2494/1M to $12.81825/1M | E2EE | 2476 ms TTFT tinfoil · 100.00% available · n=103 |
Z.ai: GLM 5.2z-ai/glm-5.2 |
+27
|
1,048,576 | $0.7174/1M to $2.317369/1M | $1.5825/1M to $7.080849/1M | E2EE 4 cited scores | 3369 ms TTFT tinfoil · 100.00% available · n=101 |
Browse every modelReview provider policiesOpen the full leaderboardSnapshot 2026-09-07T10:04:16.501Z
Questions
Do my prompts go to China when I use Qwen, GLM, or Kimi through TrustedRouter?
No. DeepSeek, Kimi, Qwen, GLM, and MiniMax routes are served via non-Chinese hosting providers on attested infrastructure, and prompts do not go to the model vendor. Zero-Data-Retention and TEE tiers are available per route; on the TEE tier, end-to-end confidential compute means even the hosting provider cannot read your prompt. You can verify the gateway live through the attestation endpoint described on the security page.
Is the GLM served through TrustedRouter the same model as the vendor-hosted API?
Same open weights, different serving stack. We measured one difference: the same GLM weights answered 60 of 60 sensitive test questions through TrustedRouter's enclave versus 30 of 60 through the vendor-hosted API. That filtering is host-applied rather than baked into the weights. Try your own prompts against the route in the playground and compare the answers for yourself.
Do I need to change my code to switch from a vendor-hosted endpoint?
The API is OpenAI-compatible. Change the base URL, keep your SDK, model ids, and code, and pick a route from the model catalog. Automatic provider fallback rolls requests over when a provider is down. You can pay with prepaid credits, bring your own provider key, or use x402 pay-per-request with MetaMask wallet sign-in.
Can my compliance team use this for regulated data?
TrustedRouter publishes SOC 2 readiness and HIPAA readiness documentation, plus a DPA, a BAA, and a subprocessor list. These are readiness materials, not audit reports or certifications: verifiable architecture plus documentation your compliance team can assess. The open-source gateway, published image digest, and live attestation give reviewers something to check directly rather than a questionnaire answer to file.