> So how come notion discovered that they actually stored the data?

Fireworks informed them.

The nature of the data here is inherently stored until used. You can read the fireworks incident report at https://fireworks.ai/security/bulletins/october-2026-securit... it's linked in the first sentence of the Notion report.

> So how come notion discovered that they actually stored the data?

Is there any legal consequence for stating you are ZDR but then internally you don't give a shit about it? I'm guessing that'd be between OpenRouter and the provider, not between the provider and the one triggering the inference, would that be correct? Does OpenRouter validate anything at all in regards to the providers, or it's a free-for-all "do whatever you want" kind of deal for OpenRouter and the providers?

[dead]