Our take
Google Vertex AI is the host to pick when the data-handling terms decide the deal rather than the price. It pairs an EU-region endpoint, a commitment not to train on prompts, an independent security attestation and a zero-retention option, and carries a wide spread of models under those same terms.
Use it for regulated or contract-bound work where the paperwork is the gating item, or when you need an EU-region endpoint and a no-training commitment from one host rather than two. Its lowest input rates are on the smaller open models. Skip it if you need measured quality or speed figures, or if heavy generation on the larger models is your main workload.
- An EU-region endpoint, a no-training commitment, an independent security attestation and a zero-retention option all hold at once, so one host covers residency and no-training without splitting the workload.
- A wide spread of models sits under that single set of terms, so a team can standardise instead of re-papering every model it adopts.
- Its lowest input rates are on the smaller open models, which makes it a cheap place to start before committing to the larger ones.
- Heavy generation on the larger models is where it costs most: the highest output rate among the offers sampled here sits on one of them.
- No benchmark score and no throughput or latency figure is held for any of its offers, so the choice has to rest on the compliance terms and the listed rates rather than on measured performance.
- The compliance facts describe the host, not each row, so confirm they extend to the specific offer you pick before you commit.
Point your tools here
We have not recorded what a router needs for Google Vertex AI yet — no base URL and no docs link on file. That is our gap, not a sign Google Vertex AI has no API; its own documentation is the place to look until we close it.
Privacy & data handling
These answers cover requests sent to Google Vertex AI through OpenRouter, as OpenRouter records them, last read 3 hours ago. For Google Vertex AI's own API we hold no answer: check its terms. SOC 2 and the data processing agreement below are hand-checked, not part of that sync.
We have not dated this attestation or linked the report yet.
Prompt retention: none.