Baseten
Try Baseten on us. Starter credit covers your first requests, then one key reaches all 17 Baseten models, with the privacy posture shown on every route.
Basetenbaseten
These privacy labels describe Baseten, the upstream model provider. Confidential requires all three: verified provider compute, end-to-end encryption and explicit zero data retention. Account and billing metadata are outside the content-retention claim.
| Provider | Baseten |
|---|---|
| API operator country | US Legal home of the API operator, not an inference-location guarantee. |
| Headquarters | Not verified |
| Routing status | Active |
| Provider website | https://www.baseten.co/ |
| Models | 17 public models |
| Credits routes | 17 |
| Zero data retention | yes All routes |
| Verified confidential inference | Not verified |
| Policy note | Baseten states that it does not store synchronous Model API inputs or outputs by default. TrustedRouter uses the synchronous Model API path; Baseten documents separate temporary input storage for async inference. Policy source |
Inference locations
Provider API declarations are also available on each model's endpoint API. Direct chat and Responses replies separate advertised availability from serving location in usage.inference_location; the actual serving region remains unknown when not reported.
usage.provider_usage.gateway_region identifies the TrustedRouter gateway, not the provider's inference location. A value such as europe-west4 does not mean the model ran in Europe. usage.inference_location.serving_region remains null when the provider has not reported it. Older gateways may return the gateway-only field as provider_usage.region.
Where the upstream GPUs execute the model, not the provider's headquarters, API ingress, or data storage. ZDR and confidential inference do not by themselves restrict geography.
- Declared countries or regions
- Not verified
No inference-location declaration has been verified for this provider. - Can locations change?
- Not verified. Do not assume that the serving location is fixed.
- Provider region pinning
- Not verified.
- Pinning through TrustedRouter
- No verified provider-specific location pin documented here.
- Infrastructure declaration
- Inference location not verified; no country-specific residency commitment.
- Evidence
- Not yet reviewed.
Provider selection alone is not a region pin. TrustedRouter's US provider filter selects company jurisdiction, not GPU location. A regional gateway hostname does not pin a downstream GPU. For a binding residency requirement, confirm the model, region, failover scope and enforced controls before sending sensitive data.
Models served by Baseten.
Each row links to pricing, provider, benchmark, and API pages for the model.
| Model | AI IQ | Context | Input | Cached input | Output |
|---|---|---|---|---|---|
deepseek/deepseek-v4-flash-0731DeepSeek: DeepSeek V4 Flash 0731 |
— | 1,048,576 | $0.13715/1M | $0.02954/1M | $0.2743/1M |
deepseek/deepseek-v4-pro-0813DeepSeek V4 Pro 0813 |
— | 1,048,576 | $1.3926/1M | $0.13926/1M | $4.1778/1M |
deepseek/deepseek-v4.1-flashDeepSeek: DeepSeek V4.1 Flash |
IQ 126#22 | 1,048,576 | $0.3165/1M | $0.01/1M | $1.266/1M |
deepseek/deepseek-v4.1-flash-1017DeepSeek: DeepSeek V4.1 Flash 1017 |
IQ 127#18 | 1,048,576 | $0.3165/1M | $0.01/1M | $1.266/1M |
deepseek/deepseek-v4.1-flash-1017-fastDeepSeek V4.1 Flash 1017 Fast |
— | 1,048,576 | $0.633/1M | $0.01477/1M | $2.532/1M |
deepseek/deepseek-v4.1-flash-fastDeepSeek V4.1 Flash Fast |
— | 1,048,576 | $0.633/1M | $0.01477/1M | $2.532/1M |
meta-models/muse-spark-openMuse Spark Open |
IQ 122#38 | 1,048,576 | $1.31875/1M | $0.15825/1M | $4.48375/1M |
moonshotai/kimi-k3MoonshotAI: Kimi K3 |
IQ 127#21 | 1,048,576 | $3.165/1M | $0.3165/1M | $15.825/1M |
nvidia/nemotron-3-ultra-550b-a55bNVIDIA: Nemotron 3 Ultra |
— | 262,144 | $0.633/1M | $0.1266/1M | $2.532/1M |
nvidia/nemotron-3.5-super-vl-120b-a12bNemotron Super 3.5 |
— | 1,048,576 | $0.211/1M | $0.0422/1M | $0.5275/1M |
openai/gpt-oss-120bOpenAI: gpt-oss-120b |
IQ 98#132 | 131,072 | $0.1055/1M | $0.1055/1M | $0.5275/1M |
reflection/beam-1.0Beam |
— | 1,048,576 | $1.3715/1M | $0.13715/1M | $4.5365/1M |
z-ai/glm-5.2Z.ai: GLM 5.2 |
IQ 118#48 | 1,048,576 | $1.477/1M | $0.1477/1M | $4.642/1M |
z-ai/glm-5.2-fastGLM 5.2 Fast |
— | 1,048,576 | $2.2155/1M | $0.22155/1M | $6.963/1M |
z-ai/glm-5.3Z.ai: GLM 5.3 |
IQ 124#28 | 1,048,576 | $1.477/1M | $0.1477/1M | $4.642/1M |
z-ai/glm-5.3-fastGLM 5.3 Fast on Fireworks |
— | 1,048,576 | $2.2155/1M | $0.22155/1M | $6.963/1M |
z-ai/glm-5.3-flashZ.ai: GLM 5.3 Flash |
IQ 119#45 | 1,048,576 | $0.15825/1M | $0.03165/1M | $0.5275/1M |
Questions
Does Baseten have zero data retention?
TrustedRouter records Baseten as supporting provider-level zero data retention based on the policy source linked on this page. This is a provider policy claim, separate from TrustedRouter's content-stateless real-time gateway and from end-to-end confidential compute.
Is Baseten end-to-end encrypted?
TrustedRouter does not currently mark Baseten as end-to-end encrypted at the provider boundary. The TrustedRouter gateway is still attested, but the selected provider normally receives the request in order to run the model. Use trustedrouter/e2e for the stronger route requirement.
Which Baseten models are available through TrustedRouter?
This page currently lists 17 public Baseten models, with live pricing, route count, context length, measured performance when available, and links to each model's provider and benchmark pages.