# Blog

Product news, engineering, and how we think about keeping data where you said it would be.

## Who controls the routing layer

2026-08-17 · Industry · 5 min read

Stripe is reportedly acquiring OpenRouter, and if the deal closes the software will not change at all. What changes is who controls the entity in the path of the prompt, an event Article 28(2) GDPR does not cover and most data processing agreements never mention.

Read: /blog/who-controls-the-routing-layer

## Someone in your company has already pasted customer data into ChatGPT

2026-08-11 · Compliance · 9 min read

Is ChatGPT GDPR compliant? The honest answer is no... mostly. It depends which ChatGPT you mean, what goes in, and what you've put around it. What Article 28 actually requires, and where the DPA stops helping you.

Read: /blog/is-chatgpt-gdpr-compliant

## Passing through OpenAI's price cut

2026-07-31 · Product · 4 min read

OpenAI cut gpt-5.6 Luna by 80% and Terra by 20%. Those cuts are now yours. Here is exactly what you pay, including the two numbers that did not fall as far and why.

Read: /blog/passing-through-the-gpt-5-6-price-cut

## Claude Opus 5, as an external route on the record

2026-07-30 · Product · 5 min read

Anthropic's newest frontier model is in the catalogue. It is not EU-resident, and reaching it takes the same firewall, egress guard, and audit trail as every other external model.

Read: /blog/claude-opus-5-as-a-governed-route

## Can you prove where your AI data goes? The EU AI Act says you have to

2026-07-12 · Compliance, EU AI Act · 5 min read

The EU AI Act forces a written answer to where your AI data goes. Why an EU region setting is not proof, and how to make residency enforceable and provable, per request.

Read: /blog/eu-ai-act-data-residency

## Introducing the embeddings API

2026-07-07 · Product · 3 min read

Generate embeddings from EU-resident or external models through one OpenAI-compatible endpoint, metered and audited like the rest of the platform.

Read: /blog/introducing-the-embeddings-api

## Introducing the MCP server

2026-07-06 · Product · 3 min read

Connect Claude, or any MCP client, to your EU-resident memory and knowledge over one OAuth connection.

Read: /blog/introducing-the-mcp-server

## Introducing Akumi

2026-06-30 · Company, Product · 4 min read

One endpoint for EU-resident AI, checked and recorded from the first token.

Read: /blog/introducing-akumi

## EU data residency is not optional

2026-06-18 · Compliance · 3 min read

Pseudonymized data is still personal data. Residency has to be enforced in code, not promised in a checkbox.

Read: /blog/eu-data-residency-is-not-optional

## How the firewall works

2026-06-05 · Engineering, Security · 3 min read

Pseudonymize before egress, restore on the way back. The model sees tokens, never the person.

Read: /blog/how-the-pii-firewall-works