> So how come notion discovered that they actually stored the data?

Is there any legal consequence for stating you are ZDR but then internally you don't give a shit about it? I'm guessing that'd be between OpenRouter and the provider, not between the provider and the one triggering the inference, would that be correct? Does OpenRouter validate anything at all in regards to the providers, or it's a free-for-all "do whatever you want" kind of deal for OpenRouter and the providers?

> So how come notion discovered that they actually stored the data?

Fireworks informed them.

The nature of the data here is inherently stored until used. You can read the fireworks incident report at https://fireworks.ai/security/bulletins/october-2026-securit... it's linked in the first sentence of the Notion report.

Sorry, it's actually not clear to me how they are getting chat transcripts having read this. Were these "datasets"? ie. Notion was training on these transcripts through Firework?

It was the model training/finetuning product that had data stolen. It doesn’t support ZDR.

Maybe prompts and prompt data only means your direct input but not the response from the model. I wonder how difficult it is to infer the prompt from the response. "We would never train on your prompts! Why would we, when they're implicitly in the content we do train on..."