Acceptable use policy

Last updated: 29 October 2026. This policy applies to all use of the NordAI API, website and CLI. Where it conflicts with a provider's terms, the stricter rule applies.

1. Prohibited activity

• Attempting to bypass quotas, rate limits, concurrency limits or model allowlists.
• Rotating through multiple accounts, keys or credentials to evade limits, or reselling raw access to the gateway without a written agreement.
• Scraping, credential stuffing, spam, malware development or intrusion into systems you do not own.
• Generating content that violates applicable law, including child sexual abuse material, credible threats, or material that infringes intellectual property.
• Circumventing the router's authentication or attempting to reach internal services directly.
• Using the agent to run destructive commands on systems where you lack authorization.

2. Automated use

Automation is allowed within your plan limits. Use a dedicated API key with per-key rate and monthly limits, send an Idempotency-Key on retries, and handle 429 responses by waiting for the reset time rather than retrying immediately.

3. Provider terms

Models are provided by third parties under their own terms. Some free tiers restrict commercial use or prohibit gateway access. NordAI only enables a model after an operator verifies its terms; if you believe a model is being misused, report it to support.

4. Security testing

Do not test the service for vulnerabilities without written permission. Report suspected issues to support@nordai.my.id with a reproduction and we will respond.

5. Enforcement

We may throttle, suspend or terminate accounts that violate this policy, and may revoke API keys or device credentials immediately. Serious abuse may be reported to the relevant provider or authority. Paid time lost to enforcement for prohibited activity is not refunded.

6. Related documents

See the terms of service and privacy policy.