Inference provider
DeepInfra
Serves
10 open model families
A US-headquartered, low-cost inference provider serving ~77-90+ open models (Llama 3.x/4.x, DeepSeek V3/V3.2/V4 variants, Qwen3, Kimi K2, GLM-5, gpt-oss-120B, MiniMax-M2, Nemotron, Gemma) over pay-as-you-go per-token pricing plus by-the-hour dedicated GPUs, and is among the cheapest providers available.
Do you really own it?
Partial
none·limited·partial·substantial·full
Analytical input: AOI C · 60.4/100
Floor-weighted, not averaged. The weakest factor caps the level. Nothing here is weak, but data control only reaches moderate - so the substantial bar, strong on both use-and-modify and data-control, is not met, and the level is partial.
You substantially control your data on DeepInfra's own open-model serving: the retrieved Terms let you keep IP over your Submissions, and zero-retention plus no-training keep inputs and outputs yours, with the open checkpoints a clean portable exit. Ownership is capped at partial because that control is not uniform - the re-sold closed models (Claude, Google) are transferred to those vendors and carry their data terms, not DeepInfra's, so route no sensitive data through them - and US-only residency rules it out where EU data sovereignty is required.
1
Use and modify freelyCan you use it freely and leave without lock-in?
StrongOpenAI-compatible API over ~77-90+ portable open-weight checkpoints on NVIDIA GPUs - the same models run elsewhere or self-hosted, so switching cost for the open catalogue is low.
How this scores (AOI sub-dimensions)
Transparency & lock-in4/5how portable it is and how easily you can leaveOpenAI-compatible API serving portable open-weight models with clear per-token and per-GPU-hour options.
Cost5/5how the pricing model compares and how predictable it isAmong the cheapest providers on the market, with very low per-token rates and competitive by-the-hour dedicated GPUs.
2
TransparencyAre the binding terms published, legible and independently checkable?
ModerateThe Terms and data-privacy docs are legible and the open catalogue is clear, but re-selling closed models under other vendors' terms adds routing opacity, sub-processors are undisclosed, and the SOC 2 Type designation sits on an unretrieved trust centre.
How this scores
Not a scored AOI dimension. For a hosted provider, transparency is whether the binding terms are published, legible and were actually read - the read/unverified evidence below, not a certification. A strong rating here must trace to a retrieved binding document.
3
Doesn't fail youDoes it stay up and stay secure?
ModerateSOC 2 and ISO 27001 certification give baseline controls, but the Type designation is unverified and no public uptime SLA, status page or independent pen-test was found.
How this scores (AOI sub-dimensions)
Reliability2/5whether it stays up, with an SLA and status historyNo incidents surfaced, but no public uptime SLA, status page or failover documentation was independently verified.
Security3/5the controls protecting your traffic and dataISO 27001 and SOC 2 certification indicate baseline controls, and the retrieved data-privacy documentation confirms batch data is held encrypted on disk then deleted.
Compliance3/5which independent certifications and attestations it holdsSOC 2 and ISO 27001 certification plus GDPR/HIPAA technical and organisational measures are stated on the retrieved data-privacy documentation, meeting the "SOC 2 or ISO 27001 + DPA" anchor.
4
Doesn't extract your dataDo the binding terms keep your data and IP yours?
ModerateFor DeepInfra's own open-model serving the retrieved Terms and data-privacy docs confirm zero-retention, no-training and customer-retained IP (customer_retains). It falls short of strong because closed models (Claude, Google) re-sold through it are transferred to those vendors under their storage/training terms, sub-processors are undisclosed, and residency is US-only with CLOUD Act exposure.
How this scores (AOI sub-dimensions)
Data governance4/5retention, training-on-inputs and data ownershipGrounded in the retrieved data-privacy documentation and Terms of Service: zero-retention by default (only debugging metadata - request ID, cost, sampling parameters - is logged), no training on submitted data, and customers retain IP over their Submissions.
Residency1/5where your data is processed and storedThe retrieved data-privacy documentation states DeepInfra runs on secure US-based data centres; no EU data-residency option was surfaced and region pinning is unconfirmed, so it sits near the single-region floor.
How the AOI score is computed
The seven dimensions above, each scored 0 to 5, weighted and summed to the 0 to 100 headline. The score is the analytical input behind the ownership verdict, not the verdict itself.
DimensionScoreWeightPoints
Data governance4/50.2419.2
Compliance3/50.1810.8
Residency1/50.163.2
Security3/50.148.4
Reliability2/50.124.8
Transparency & lock-in4/50.108.0
Cost5/50.066.0
HeadlineC · 60.4/100
Sources
Every rating traces to a primary document. Read means the text was verified; unverified means it is known to exist but has not yet been read.
DocumentWhat it grounds
Documentationread2026-07-25
DeepInfra data-privacy documentation: zero-retention by default, only debugging metadata (request ID, cost, sampling parameters) is logged, batch/bulk data is held encrypted on disk then deleted after a short retention period, it does not train on submitted data, it runs on secure US-based data centres, and it is SOC 2 and ISO 27001 certified.
Privacy Policyread2026-07-25
DeepInfra data-privacy statement: it does not use API data for training except when using Google or Anthropic models, where the receiving company's training policy applies - if you use a Google model, Google stores the output per its Privacy Notice; if you use an Anthropic model, Anthropic stores the output per its Trust Centre.
Terms of serviceread2026-07-25
DeepInfra Terms of Service: 'When you submit data, content, materials, or requests into models through DeepInfra (Submissions), you retain any intellectual property rights over such Submissions, which will remain private'; DeepInfra does not share data with third parties except when using Google or Anthropic models, where it is required to transfer data to those endpoints to fulfil the request.
Securityunverified2026-07-25
Trust centre (Sprinto-powered) is stated to list SOC 2 Type 1 (not Type II) and ISO 27001; the SOC 2 Type designation, sub-processor list and ISO 27701 status were not read verbatim this session - documented but unverified.
Third-party analysisunverified2026-07-25
Among the cheapest providers (third-party pricing research): per-token e.g.
Documentationread2026-07-25
DeepInfra data-privacy documentation states it runs on secure US-based data centres; no EU data-residency option was surfaced.
Third-party analysisunverified2026-07-25
Serves ~77-90+ open models over an OpenAI-compatible API on NVIDIA GPUs plus per-hour GPU instances; also re-sells some closed models (Anthropic Claude, Google).