Enterprise
For estates, air gaps, and procurement departments.
The hosted API suits most customers. This page is for the ones whose screens sit behind a firewall that takes a quarter to change, on a vessel with no link, or in a building where the security questionnaire is longer than this website.
Photograph: Hugovanmeijeren · CC BY-SA 3.0, via Wikimedia Commons
The offline pack
A tarball containing the corpus, or any subset of it, with a manifest and a detached signature. Verify the signature, put it on the box, and take the box off the network. The pack has no expiry and no phone-home; if you renew, you get a new pack, and if you do not, the one you have keeps working.
shell
$ nf pack fetch --channels=standards,horology --level=9 $ nf pack verify neutralfeed-2026-08.tar.zst manifest ok 41,904 items, 6 channels signature ok ed25519, key nf-pack-2024 calibration ok max novelty 0.19, max controversy 0.00
Customers on vessels and offshore installations run this on a quarterly cycle. One asked whether the pack would still verify if the company ceased trading. It would: the signature is checked against a key you already hold, not against a server.
On-premises deployment
A single container with no external dependencies and no outbound connections. It serves the same /v1 API as the hosted service, so nothing on your displays needs to know which one it is talking to beyond the base URL. Health endpoint, Prometheus metrics, structured logs, and no telemetry going anywhere.
- x86-64 and arm64 images, or a tarball of the binary if you would rather not run a container
- Two vCPU and 2 GB of memory serves an estate of several thousand displays
- No database. The corpus is a read-only file; updating means replacing it.
- Read-only root filesystem and a non-root user by default
Compliance
The unusual thing about NeutralFeed from a review standpoint is how little there is to review. The API accepts a key and returns text. It collects no personal data, sets no cookies, has no user accounts on the display side, and has nothing to export or erase on request because it never had anything.
- No personal data processed, so no data processing agreement is required — though we will sign yours
- SOC 2 Type II on the hosted service, renewed annually; report under NDA
- Penetration test summary available without an NDA
- Sub-processor list: two. A cloud provider and a payment processor.
- Accessibility: WCAG 2.2 AA for the component and the presets, with a VPAT
Procurement
We have been through this enough times to have opinions. We will complete your questionnaire, join the call, and sign the paper. We will not put a discount behind a deadline, and we will not send a second email about it. Contracts are annual, invoiced on your terms, and the named contact will not telephone you.
The most common feedback on our security review is that reviewers assume a page has been left out.