Enterprise
The gateway your security and procurement teams sign off on.
Dedicated VPC deployment, SOC 2 Type II in progress, custom 99.99% SLAs, BYO provider contracts, and procurement-ready legal artifacts.
Every enterprise control included.
SSO, audit logs, guardrails, and RBAC ship to every customer from day one.
Routing, fallback & retry.
Choose a model with configured fallbacks, or use nrouter/auto across 371+ models.
- Fallback chains and per-org retry, timeout, and cooldown tuning
- Settled at the served model list price with 0% platform fee
SSO & SAML.
SAML 2.0 and OIDC against Okta, Azure AD, Google Workspace, or any compatible IdP.
- SCIM directory provisioning included on every plan
- IdP-enforced multi-factor authentication
Audit logging.
Append-only trail of every key, guardrail, budget, and team change.
- Records actor, timestamp, source IP, and payload diff
- CSV and JSON export for SIEM ingestion
Guardrails on every request.
Built-in PII redaction, prompt-injection detection, and keyword content filtering.
- Scoped across organization, team, and virtual key
- Included on every plan at no extra cost
RBAC & team management.
Organization, team, and member hierarchy with four roles and database-level isolation.
- Row-Level Security isolation across organizations and teams
- Per-org, per-team, and per-key budgets and rate limits
White-label branding.
Your logo, your colors, and your custom domain via CNAME for downstream users.
- Branded key portal with nRouter branding removed
- Included on self-serve and Enterprise alike
Deploy it the way your architecture demands.
Managed multi-tenant is generally available today; dedicated, VPC, and roadmap options are scoped with sales.
Managed multi-tenant
Shared autoscaling infrastructure with database-level tenant isolation. US default, regional pins on request.Generally availableDedicated tenancy
Isolated database, dedicated routing engine, and provisioned throughput pinned to your region of choice.EnterpriseVPC / BYO-cloud
Inside your GCP, AWS, or Azure perimeter: dedicated data plane in your private VPC, managed control plane.EnterpriseOn-premise / air-gapped
Self-hosted, air-gapped deployment for strictly regulated environments. Scoped per engagement.Roadmap
Contracts, networking, and residency.
Bring committed provider contracts, keep traffic off the public internet, and pin where data lives.
BYO provider contracts.
The standard managed product is no-BYOK. On a dedicated Enterprise deployment, route through your existing committed provider spend with your pricing preserved and credentials isolated.
Private networking.
TLS 1.2+ and preloaded HSTS are enforced across all public endpoints. Enterprise adds corporate egress IP allowlisting and AWS PrivateLink, GCP Private Service Connect, or Azure Private Endpoint.
Regional data residency.
US East (Virginia) is the default GA footprint. EU, UK, Canada, Australia, Singapore, and India are pinned on request on Enterprise and never moved without an explicit migration request.
8
Custom SLAs & named CSM.
The published SLA is 99.9% uptime on Pay as you go. A 99.99% uptime target backed by financial credits is negotiated per Enterprise contract; guided onboarding, migration assistance, and a named CSM are available in Enterprise contracts.
99.99%
Honest status on every framework.
Full controls detail in the Security overview and the trust center. Vendor questionnaires: security@nrouter.ai.
SOC 2 Type II
SOC 2-aligned controls operate today; a formal SOC 2 Type II observation period is underway.Audit in progressISO/IEC 27001
Information security practices aligned to ISO/IEC 27001 Annex A controls on certified cloud infrastructure.Aligned — certification plannedGDPR
Data Processing Addendum with EU Standard Contractual Clauses, erasure tooling, and EU residency options.Compliant — DPA availableHIPAA
Supports HIPAA-eligible workloads with a Business Associate Agreement (BAA) and built-in PII redaction.BAA available on EnterprisePCI DSS
All payments are processed by Stripe (PCI DSS Level 1); raw card numbers never reach nRouter servers.Stripe PCI L1 — no card data on our serversData residency
US East (Virginia) is default GA; EU, UK, Canada, Australia, Singapore, and India are available on request.US GA · EU + more on request
The paperwork your legal team will ask for.
The DPA and SLA are published. The MSA and HIPAA BAA are issued on request through sales.
Data Processing Addendum
GDPR Art. 28 processor terms with EU Standard Contractual Clauses.PublishedService Level Agreement
Published 99.9% uptime SLA on Pay as you go; 99.99% is a negotiated Enterprise contract target.PublishedMaster Service Agreement
Standard enterprise agreement with redline support for custom volume and dedicated deployments.On requestBusiness Associate Agreement
HIPAA business associate agreement for healthcare workloads processing protected health information.On request
FAQs
What's the minimum enterprise commitment?
Self-serve features (SSO, audit logs, guardrails, RBAC, custom branding) are included on Pay as you go at no extra cost. Enterprise is for teams that need dedicated capacity, dedicated or VPC deployment, a named CSM, custom contracts, or a residency pin. It is custom-priced based on volume; talk to sales to scope it.
What deployment options do you offer?
Managed multi-tenant is generally available and the default. Dedicated single-tenant deployments and VPC / BYO-cloud deployments are Enterprise engagements scoped with your cloud team. Fully air-gapped on-premise is on the roadmap, not GA — we will be candid about timelines on a call rather than over-promising.
Can we use our own provider contracts (BYOK)?
The standard managed product is intentionally no-BYOK. You never handle a provider key. For Enterprise customers with existing committed-spend contracts (your reserved capacity or dedicated throughput commitments with a model provider), nRouter can route through that capacity on a dedicated deployment, with your provider pricing preserved. This is an Enterprise-only capability. Talk to us about your existing commitments.
Where can our data be processed?
United States is the default footprint. EU, UK, Canada, Australia, Singapore, and India are available on request for residency-sensitive workloads; a region other than the default is pinned at provision time and generally requires a dedicated deployment. Customer data is replicated within a single region and never moved without an explicit migration request.
Which compliance documents can procurement get?
The Data Processing Addendum (DPA) and SLA are published and linkable directly. The MSA and a HIPAA BAA are provided on request through the sales team. nRouter operates SOC 2-aligned and ISO 27001-aligned controls; a formal SOC 2 Type II audit is in progress. Any customer can request a controls walkthrough or a completed vendor security questionnaire from security@nrouter.ai.
What's your SLA and support model?
The published SLA is 99.9% uptime on Pay as you go. A 99.99% uptime target backed by financial credits is negotiated per Enterprise contract. Priority incident response, a named Customer Success Manager, a private support channel, and quarterly business reviews are available in Enterprise contracts.