Government Privacy Features Pricing Models Connect your tool Version française en préparation Log in Join Waitlist
Now onboarding founding users

Frontier AI access,
without losing control.

You own your data. We never train on it.

Use Canadian-resident or global AI routes by selecting the exact model key, with route and custody evidence on every request.

Join the Waitlist See How It Works
Reserve sovereign open-model capacity
Near-frontier open models on Canadian-owned, controlled-goods-capable hardware. Commit from $5,000/mo, no charge today.
quickstart.py
import os from openai import OpenAI client = OpenAI( base_url="https://northerninference.ca/v1", api_key=os.environ["NI_API_KEY"] ) response = client.chat.completions.create( model="azure/gpt-4.1-mini-ca", # exact route key messages=[{"role": "user", "content": "Hello from NI"}], max_tokens=200, ) print(response.choices[0].message.content)

Route to the world's best models

Your data is yours.

Northern Inference processes request content in flight to route it, but does not train on customer content or keep prompts and responses by default. We keep operational metadata such as the resolved model, token counts, cost, and jurisdiction. Provider training, logging, and retention terms remain route-specific and are published on each model card.

You own it

Your prompts and completions belong to you. We route them. We do not claim them.

Never trained on

Northern Inference does not train models on your content. Provider data-use terms are published for each exact route.

Never retained

We do not persist request content by default. It passes through our infrastructure in memory only and is gone when the request ends.

Resident in Canada (tier nuance)

Tier 3 routes keep the NI-controlled path and selected provider region in Canada. The portal stores a tamper-evident custody record whose canonical digest is signed with NI's published Ed25519 key.

🇨🇦
Government & Public Sector

Built on a verifiable chain of custody.
Ready for government.

Every request carries a chain-of-custody record identifying exactly which entity, region, and jurisdiction we routed it to at each hop. Proof your security team can audit, not just a promise. Our residency guard fails closed: a Tier 3 request that cannot stay in a Canadian region is blocked, not silently rerouted. We attest the route up to the provider boundary. Inside the provider, where inference runs and how your data is handled rests on the provider's own commitments, and we surface those: every model publishes a data-use posture that cites the provider's published policy, dated and quoted verbatim, with a link to the live source. See each model's data-use posture.

Canadian Data Residency

At Tier 3 we route to Canadian regions such as AWS ca-central-1 and Azure Canada East. The routing layer fails closed when a request cannot be served in the selected jurisdiction. Up to the provider boundary the route is ours to attest; inside the provider we cite the provider's dated documentation on each model's data-use posture.

Transparent Data Custody

Every response identifies the resolved route, provider region, jurisdiction, and custody path. It also shows whether the provider call used NI-managed credentials or the customer's BYOK credential. The portal preserves the corresponding signed custody record.

Data-use posture, sourced

For every model route we publish where training, logging, and retention stand. Each claim is cited to the provider's own dated documentation, with a link to the live source and the relevant section highlighted. Claims you can check, not assertions you can't. Browse the data-use posture.

Privacy Tier Model

Select your privacy level by choosing the exact model route. Customer-hosted and NI sovereign hardware are planned tiers; Canadian cloud and provider-default routes are live today.

PII Substitution

Opt-in automatic PII detection and substitution replaces supported identifiers before the provider call, then restores them in responses. Operational audit metadata records that substitution occurred without storing the original prompt.

Built for Federal Procurement

Runs on AWS Canada infrastructure that holds SOC 2 Type II, ISO 27001, and PCI-DSS (AWS attestations, not NI's). ITSG-33 PBMM control mapping in progress. Full status and roadmap on our Trust page.

Procurement-Friendly Pricing

Transparent per-token rates and clear invoicing in CAD. Credit purchases carry the disclosed 9% service fee. Usage, fees, and balance deductions remain separately reviewable.

Standard API Format

OpenAI-compatible chat completions and Anthropic-compatible Messages endpoints support common SDKs and tools. Feature compatibility depends on the endpoint and selected provider route.

Request a Government Briefing

Priority access and dedicated onboarding for government and public sector organizations.

We'll respond within 2 business days. Privacy Policy

PIPEDA-aligned AWS Canada Attestations Tier 3 Canadian Regions Transparent Custody
your_app.py
import os from openai import OpenAI # Before: provider default endpoint client = OpenAI( api_key=os.environ["OPENAI_API_KEY"] ) # After: NI endpoint plus NI API key client = OpenAI( base_url="https://northerninference.ca/v1", api_key=os.environ["NI_API_KEY"] ) # Canadian data residency route r1 = client.chat.completions.create( model="vertex_ai/gemini-2.5-pro-ca", messages=messages ) # Global/provider-default route r2 = client.chat.completions.create( model="bedrock/global.anthropic.claude-haiku-4-5-20251001-v1:0-global", messages=messages )

Set one endpoint.
Pick one route key.

Northern Inference uses the industry-standard chat completions API format. Use an NI API key, point any compatible SDK to our endpoint, then choose an exact model route from the live catalog.

  • Works with documented OpenAI-compatible and Anthropic-compatible clients
  • Route sensitive data through your own hardware via NI (coming soon). Unlimited tokens, no third parties
  • Switch models without changing code
  • Transparent route pricing, including token, request, or image units where applicable

Choose Your Level of Trust

Choose the model route for every API call. Planned customer-hosted and sovereign-hardware routes, live Canadian cloud, and live provider-default access each carry an explicit tier in the route key.

1
Coming Soon
Customer-Hosted

Self-Hosted Hardware

Your hardware, your premises, open-source models. NI tunnels API requests into your machine; only you ever see prompts and completions. The strongest privacy guarantee we offer. Phase 5 of our roadmap.

Only you process data
2
Coming Soon
NI-Owned Hardware

Sovereign Hardware

True sovereignty, beyond residency: NI's own bare-metal in a Canadian-owned data centre. Single-tenant, we hold the keys, no US-owned cloud anywhere in the path. NI can see plaintext to route your request; the guarantee is jurisdiction and control, not cryptographic isolation. This is where sovereign AI is heading, and it is Phase 5 of our roadmap.

Single-tenant, we hold the keys
3
Live
Canadian Cloud

Managed Cloud

AWS Bedrock and Azure OpenAI routes in Canadian regions. Provider training, logging, and retention posture is published per route from the provider's current documentation.

Cloud provider processes in Canada
4
Live
Provider-Default

Global Access

Broader model access through NI-routed upstream providers outside the Canadian-residency boundary. This can include direct APIs, Bedrock in US regions, Azure GlobalStandard, Vertex US regions, and other provider-default routes.

Exact route shown per request
Your Device
NI Gateway
Canadian Cloud
Model

Tier 3: Canadian cloud. AWS Bedrock or Azure OpenAI in ca-central-1. Provider cannot train on your data.

Sovereignty, not just residency.

Residency answers where your data sits. Sovereignty answers whose law reaches it. We are standing up Tier 2 on our own Canadian hardware: bare-metal we own, in a Canadian-owned data centre, with no US-owned cloud anywhere in the path.

We own the machine

Single-tenant bare-metal in a locked cage in a Canadian-owned facility. Not a VM on someone else's cloud.

We hold the keys

The planned architecture keeps encryption keys under NI control and removes a third-party cloud provider from the inference path.

No US cloud in the path

The planned Tier 2 path uses NI-owned hardware in a Canadian-owned facility, reducing reliance on foreign-owned cloud infrastructure.

True per-tenant isolation

The planned inference engine will isolate prompt and KV-cache state per tenant. The implementation must pass security review before this tier is marked live.

Tier 4 is access. Tier 3 is Canadian residency by contract. Tier 2 is sovereignty by control, the next rung on the ladder, and the need is not unique to Canada or to controlled-goods work. Healthcare, financial services, legal, defence, and government all depend on infrastructure that cannot answer to a foreign cloud, in Canada and beyond.

Available Models

Current routes available through the NI API with transparent unit pricing. Choose by provider, tier, or data residency.

Tier 3: Canadian Cloud

Managed Canadian cloud routes. Data residency stays in Canada when the exact route is Tier 3.

Tier 4: Global Access

Provider-default or global routes. Use when model access matters more than Canadian residency.

Tier
Provider

Pre-order Hardware

Register your interest. We'll contact you when your bundle is ready to ship.

Reserve sovereign open-model capacity

Tell us what you would commit monthly. When committed demand covers a Canadian sovereign node, we stand it up. No charge today.

One API. Every enabled route.

Use one API for the routes in the live catalog. Switch provider, tier, and region by changing the exact model key.

Standard API Format

Uses documented OpenAI-compatible chat completions and Anthropic-compatible Messages endpoints. Supported request features depend on the endpoint and route.

Frontier and Near-Frontier Models

The live catalog includes enabled Claude, GPT, Gemini, Llama, Mistral, and other routes. The exact model key determines provider, tier, and region.

Transparent Billing

See the provider cost and our fee separately on every request. Thinking tokens billed at the rate shown per model. No expiring credits. No surprise overages.

Per-Request Privacy

Choose the exact route key on every API call. Route sensitive prompts through your own hardware (coming soon), casual queries through cloud providers.

PII Substitution

Names, emails, and identifiers are replaced with realistic fakes before reaching the model, then restored in responses. Opt-in per API key or per request.

Real-Time Analytics

Live dashboard with per-model, per-team cost breakdowns. Budget alerts and hard limits built in.

Canadian Sovereignty

The NI control plane runs in Canada. Tier 3 exact routes add Canadian provider-region enforcement and fail closed on jurisdiction drift.

Automatic Prompt Caching

On supported routes, NI can mark stable prompt prefixes for provider caching automatically. Cache behavior, retention, jurisdiction, and price remain specific to the selected provider route and are disclosed in its data-use and pricing records.

Built Different

Northern Inference is developer infrastructure, not a consumer chatbot.

Northern Inference Venice.ai OpenRouter Direct APIs
Per-request privacy control
Canadian data residency (Tier 3 routes)
Transparent pricing
Standard API format
Per-request custody trail
PII substitution
No crypto required

No Surprises. No Games.

Pay for what you use.

See provider-rated usage cost and any NI per-request fee separately. Credit purchases carry a 9% service fee. There are no monthly minimums, credits do not expire, and thinking-token rates are shown per model when applicable.

Transparent route rates No monthly minimums Credits never expire Thinking tokens priced openly

Early access members get priority onboarding

See live rates for every enabled route →

Get Early Access

Be among the first to use Northern Inference.

Early access: priority onboarding
Start free with CA$5 in credits. No credit card required.

No spam. Unsubscribe anytime. Privacy Policy

Share to move up the waitlist

Each referral moves you closer to the front of the line.