No-Log LLM API: Content-Stateless Real-Time Inference
A no-log LLM API you can verify: content-stateless real-time inference, explicit encrypted Batch retention, attested TEE routes, and 220+ model routes.
No prompt logs, enforced by code you can read and attestation you can check.
Most no-log claims are a sentence in a privacy policy. TrustedRouter never logs prompt or output content. Ordinary synchronous and streaming inference does not retain it. The opt-in Batch API temporarily retains enclave-encrypted artifacts for up to 30 days. On TEE routes that behavior runs inside a hardware-attested confidential-compute gateway: the source is open, the image digest is published, and a live attestation signed by the CPU vendor's root key is one curl away.
The API is OpenAI-compatible. Point base_url at https://api.trustedrouter.com/v1 and keep your SDK, your model ids, and your code. You get 220+ model routes across 30+ providers, including Claude, GPT, Gemini, DeepSeek, Kimi, Qwen, and GLM, with automatic rollover when a provider goes down.
NONCE=$(openssl rand -hex 16)
curl "https://api.trustedrouter.com/attestation?nonce=$NONCE"
# Returns a JWT signed by the CPU vendor's root key.
# image_digest must match the published open-source build.Content is not stored
TrustedRouter never logs prompt or output content. Ordinary synchronous and streaming inference does not retain it. The opt-in Batch API temporarily retains enclave-encrypted artifacts for up to 30 days. Usage metadata is separate: token counts and billing records are kept so your account and spend tracking work.
Three kinds of no-log, labeled per route
Open routes run through the attested gateway to any provider. Zero-Data-Retention routes add providers contractually bound to keep nothing; they rely on the provider honoring that contract. TEE routes run end-to-end in confidential compute, where even the provider cannot read your prompt. Full breakdown at zero data retention.
Anonymous-friendly access
Prepaid credits via Stripe, bring your own provider key, or pay per request with x402. Continue with MetaMask signs you in with a wallet and works without a traditional account. Built to be friendly to pseudonymous use; we do not promise anonymity.
Attestation beats a privacy policy.
Roleplay chats, character cards, journals, drafts: the text people send to an LLM API is personal. The standard advice for no-log inference is to run models locally, which caps you at whatever your hardware can hold. TrustedRouter's answer is a gateway you can inspect: open source, a published image digest, and attestation bound to the live TLS session so nothing can be replayed at you.
The catalog holds up its end. DeepSeek, Kimi, Qwen, GLM, and MiniMax routes are served by non-Chinese hosting providers on attested infrastructure with ZDR and TEE tiers, so you get frontier Chinese open-weights without sending your data to the model vendor. Pick a route with the model chooser, compare latency measured from real routed requests at the latency benchmarks, and see per-model rates at pricing.
Current routes, prices, privacy, and measured performance.
Catalog facts come from the routes currently configured in TrustedRouter. Performance uses the same cached metadata snapshot as the public leaderboard. Prompts and outputs are not part of these measurements.
| Model | Providers | Context | Input | Output | Privacy | Measured route |
|---|---|---|---|---|---|---|
Anthropic: Claude Opus 4.8anthropic/claude-opus-4.8 |
|
1,000,000 | $5.275/1M | $26.375/1M | varies 5 cited scores | Warming up |
OpenAI: GPT-5.5openai/gpt-5.5 |
|
1,050,000 | $5.275/1M | $31.65/1M | ZDR 3 cited scores | 1453 ms TTFT openai · 100.00% available · n=5 |
Google: Gemini 3.5 Flashgoogle/gemini-3.5-flash |
+1
|
1,048,576 | $1.5825/1M | $9.495/1M | ZDR | 1472 ms TTFT google-ai-studio · 100.00% available · n=9 |
MoonshotAI: Kimi K2.7 Codemoonshotai/kimi-k2.7-code |
+10
|
262,144 | $0.70685/1M to $1.13096/1M | $3.587/1M to $4.90575/1M | ZDR 5 cited scores | 1457 ms TTFT kimi · 26 tok/s · 100.00% available · n=35 |
Z.ai: GLM 5.2z-ai/glm-5.2 |
+27
|
1,048,576 | $0.7174/1M to $2.317369/1M | $1.5825/1M to $7.080849/1M | E2EE 4 cited scores | 3369 ms TTFT tinfoil · 100.00% available · n=101 |
MiniMax: MiniMax M3minimax/minimax-m3 |
+10
|
524,288 | $0.24265/1M to $2.11/1M | $1.0128/1M to $10.55/1M | ZDR 4 cited scores | 1356 ms TTFT together · 135 tok/s · 98.35% available · n=153 |
Browse every modelReview provider policiesOpen the full leaderboardSnapshot 2026-09-07T10:06:19.864Z
Questions
Does TrustedRouter log my prompts?
TrustedRouter never logs prompt or output content. Ordinary synchronous and streaming inference does not retain it. The opt-in Batch API temporarily retains enclave-encrypted artifacts for up to 30 days. Usage metadata is separate: token counts and billing records are kept so your account and spend tracking work. On TEE routes, the request path runs inside a hardware-attested confidential-compute gateway with open source and a published image digest. Privacy you can check beats privacy you're promised.
How do I verify the no-log claim myself?
Request a live attestation: curl the /attestation endpoint with a fresh nonce and you get back a JWT signed by the CPU vendor's root key. Confirm the image_digest matches the published open-source artifact. The attestation binds to the live TLS session, so an old response cannot be replayed at you. The full procedure is documented on the security page.
Do all routes have the same privacy level?
No. Every route carries a tier. Open routes run through the attested gateway to any provider. Zero-Data-Retention routes use providers contractually bound to keep nothing, so they rely on the provider honoring that contract. TEE routes run end-to-end in confidential compute, where even the provider cannot read your prompt.
Can I use TrustedRouter without a traditional account?
Yes. Continue with MetaMask signs you in with a wallet and works without a traditional account, and x402 supports pay-per-request crypto payments. Prepaid credits via Stripe and bring-your-own-key access are also available. This is anonymous-friendly access built for pseudonymous use; TrustedRouter does not promise anonymity guarantees.