Zero data retention
How the gateway sends a request only to models whose provider offers zero data retention, and which models the catalog marks that way.
Zero data retention (ZDR) is an arrangement under which a model provider does not keep your prompts or the model's outputs after it answers. In the API Platform, ZDR is a routing rule: when it is on, the gateway sends your request only to models whose provider offers it.
Turn it on
| For | How |
|---|---|
| One request | Add "provider": { "zdr": true } to the request body. |
| The whole workspace | A tenant admin or super admin turns on Only use models whose provider offers zero data retention in Usage › Credits and limits › Gateway settings. It covers the API and the Workbench. |
A request can ask for ZDR on its own, but it cannot turn off a workspace's requirement.
How routing works
With ZDR on:
- The gateway only considers models whose catalog entry has
zdr_available: true. Fallbacks must meet the same rule. - If the model you asked for doesn't offer ZDR, the request goes to an allowed fallback that does, when you have turned fallbacks on. Otherwise it is refused with
503 model_unavailable, and the message says zero data retention is not offered for that model. It is never sent to a model that doesn't offer ZDR. - For OpenAI models, the gateway also sends
store: false. - Safeguard's request log records that the request was made under ZDR.
ZDR does not change two things:
- Safeguard's own records. The metadata row in your request log is always kept. Prompt and output text is stored only if Store prompts and outputs is on, and that holds for ZDR requests too. Leave it off if you want no copy of the text at Safeguard. See Privacy and data.
- Models you bring yourself. The ZDR rule does not apply to them. Your own agreement with that provider decides what it keeps. See Bring your own model.
Check the arrangement before you rely on it. The catalog flag records that a provider offers zero data retention, taken from the provider's published data policy. Some providers offer it only to approved accounts, and the provider's terms decide what it keeps. Before you send regulated data under ZDR, ask Safeguard to confirm the arrangement for that provider.
Which models offer it
The catalog's zdr_available field is the source of truth, and a model whose field is empty is treated as not offering ZDR. You can read the field for every model, available or not, with GET /gpt/v1/models?all=true. On safeguard.sh/models, each model's page shows Zero data retention under Data policy, and the list can be filtered to Zero data retention available.
What the catalog says on 8 October 2026:
| Provider | Zero data retention |
|---|---|
| OpenAI | Offered for the models OpenAI serves itself. |
| Anthropic | Offered for Claude Opus 5.5, Claude Sonnet 5.5 and Claude Haiku 5.5. Not offered for Claude Fable 5.1 or Claude Mythos 5.1, for which Anthropic requires 30-day retention. |
| Mistral AI | Marked as offered for every Mistral model, so the gateway routes ZDR requests to them. Mistral's terms, quoted in the catalog, exclude preview models such as Mistral Large 4 from ZDR, so check the model's data policy first. |
| xAI | Offered. |
| Cohere | Offered. Cohere grants it to approved enterprise customers. |
| Google (Gemini API) | Not offered on the Gemini API, which is the API the gateway uses for Google's models. |
| DeepSeek, Qwen (Alibaba Cloud) and Meta | Not stated by the provider, so treated as not offered. |
| Open-weight models served by a host, such as gpt-oss, Gemma or Llama | Depends on the host. Not set, so treated as not offered. |
| Safeguard's models: Griffin, Eagle, Lion and Zero | Not set, so a request that requires ZDR is refused for them. |
Related
Privacy and data
What the API Platform sends to model providers, what Safeguard keeps about each request, and for how long.
Regions and data residency
Where models process your requests, what the gateway does and does not do about regions, the countries where Safeguard's own models are offered, and where Safeguard stores your API Platform records.