Questions we'd ask too

Yes, at its core — and we're not going to pretend otherwise. What we've built on top of that is the part that's hard to do yourself: per-customer isolation, a normalized request shape across four very different CLIs, and the auth/streaming/tool-calling plumbing so you don't integrate each one separately.

This is a real dependency and we don't pretend it isn't. It's worth noting we're not reselling or pooling access — you sign in with your own account, inside your own isolated environment, against your own quota, the same as if you ran the agent yourself. We support four independent providers rather than one, so a change to any single provider doesn't take the platform down — and because the integration layer per provider is thin, we can adapt quickly when one changes. We actively track each provider's terms and CLI behavior and will tell you directly if something affecting your account changes.

No. Nefin is a routing and orchestration layer, not a model provider — request bodies pass through to your chosen CLI agent and back. We log operational metadata (timing, status codes) for reliability, not full conversation content, and we don't train anything on your data.

No — this isn't a policy promise layered on top, it's architectural. Each customer runs in a dedicated, network-isolated environment and signs in with their own credentials. There's no code path where one tenant's request or quota touches another's.

Not yet — we're an early-stage product and won't claim certifications we don't have. Isolation-by-default has been the architecture from day one rather than something bolted on later. If a compliance report is a blocker for your evaluation, tell us — it helps us prioritize.

The request shape is identical, but the agents behind it aren't — tool-calling reliability and vision support differ per provider. See the Providers page for a straight comparison before you pick one for a given workload.

You move to the plan you signed up for, billed monthly or annually — no surprise charge, no auto-upgrade. You can cancel any time, effective at the end of your current billing period.

Only that provider's endpoint is affected — the others keep working. You'll get a clear error rather than a silent failure, and re-authenticating takes a couple of minutes; see Authentication for the exact flow per provider.