NordLayer Review Australia 2026
Sourced business remote access — per-seat USD, private gateways start on Core
NordLayer is for sale to Australian organisations in USD with a five-seat minimum, documented 6 devices per member, MFA/SSO on Lite, and advertised Australia/Sydney locations. The honest Lite price is US$10/user/month if you actually want month-to-month, or US$96/user/year on the yearly grid — not the US$8 teaser as a cancellable monthly. Tax is additional. Lite is shared-gateway internet egress. Virtual Private Gateways start on Core with a dedicated-IP add-on. ISO 27001 and SOC 2 are dated vendor announcements with Request-gated Trust Center files, not reports we opened. No independent speed or leak tests were run.
- Best for
- Australian organisations that can read per-seat billed totals, want documented MFA/SSO on a business VPN, and accept that private-resource access and inspectable audit PDFs are extra or unavailable on the public site.
- Not ideal for
- Anyone budgeting the yearly US$8 teaser as cancellable monthly, teams that need private-network access on the cheapest SKU, buyers who need a public inspectable audit report, users who need a free plan or confirmed Australian data residency, or anyone trying to use personal NordVPN as a company overlay.
SoftwareHQ does not currently have an affiliate arrangement with NordLayer. The review is independent of commercial relationships. Affiliate disclosure
Overview
NordLayer is a business remote-access product. Ownership, logging, control-plane hosting and private-resource access are recorded separately. Public internet egress is not Australian data residency.
Feature highlights
These highlights come from vendor documentation and editorial analysis of public sources. They are not firsthand test results or a claim that every listed capability was exercised in a trial.
- Yearly US$8/user is not cancellable monthly
On 12 Sep 2026 the yearly Lite card printed US$8 user/month (SAVE 20%). The same page payload lists monthlyPrice 10. Hand check 8×12=96. Tax is additional. Do not budget the yearly teaser as a month-to-month seat.
- Five-user minimum, six devices per member
Lite/Core/Premium cards: 5 users minimum. Help: any organisation member can use up to 6 devices (desktop, mobile, browser extension and manual configs share the cap).
- Lite is shared-gateway egress; private resources start on Core
Lite is documented for Virtual Shared Gateways (internet access, geo masking, Always On). Virtual Private Gateways, dedicated IPs and IP allowlisting start on Core and require a dedicated-IP server add-on. Do not buy Lite for private-network access.
- SSO and MFA on the starting Lite SKU
Compare table: MFA and SSO (Okta, Entra ID, OneLogin, Google, JumpCloud) included on Lite. 2FA is SMS or TOTP. SCIM user provisioning is an add-on on Lite/Core and included on Premium.
- Advertised Australia / Sydney locations are not data residency
Dedicated-IP help names Australia (Sydney). Shared and private gateway pages list Australia. That is an advertised exit map, not physical-versus-virtual proof and not Australian account hosting.
- ISO 27001 and SOC 2 are announcements, not opened reports
Help names UAB Sertika ISO/IEC 27001:2022 for NordLayer and NordPass Business. Trust Center certificate/HIPAA rows are Request-gated. Pricing says SOC 2 Type I; help says Type 2. No public PDF was inspected.
Ownership and jurisdiction
Legal entity and jurisdiction are not the exit-server map.
- Legal entity
- Nord Security Inc.
- Jurisdiction
- United States
- Parent company
- Nord Security (nordsec B.V., Amsterdam, is the EEA GDPR representative)
- Five Eyes
- Yes
Privacy Policy 13 Feb 2026: controller is Nord Security Inc., Americas Towers, 1177 6th Avenue, 5th FLR, New York, NY 10036, USA. Terms 20 Aug 2026 are between Nord Security Inc. and the customer organisation; governing law England and Wales. About-us: developed by the team behind NordVPN; NordLayer named as a product in 2021 (2020: NordVPN launched a business VPN). The United States is a Five Eyes member. Jurisdiction is the legal entity, not the exit-server map. This is not the Panama nordvpn S.A. consumer product.
- https://nordlayer.com/privacy-policy/ · checked 2026-09-12
- https://nordlayer.com/terms-of-service/ · checked 2026-09-12
- https://nordlayer.com/about-us/ · checked 2026-09-12
Logging and retained data
A vendor no-logs claim is not proof of zero retained account or payment data.
- Logging policy
- Activity logs
- Retained service data
- Documented retained service data
This is an admin product, not a consumer no-logs VPN. Privacy Policy: on behalf of customers NordLayer processes end-user names, email, professional information, login/subscription data, device information (device name, IP address, OS, advertising id), application diagnostics, connection timestamps, the server connected to, and access to shared servers (unless the customer disables that). Admins can see shared and virtual-private-gateway connection timestamps, hostname, server, and origin IP.
- end-user name and email
- professional / organisation information
- account registration and login information
- subscription and payment/billing identifiers (when NordLayer is controller)
- device name, IP address, OS, advertising id
- application diagnostics
- connection timestamps and server connected to
- origin IP for gateway connections (visible to the customer admin)
- optional Device Posture / Download Protection extras (serial, unique ID, jailbreak/root, file path, downloaded-file scan logs) when the customer enables those features
- website access logs (IP, OS, browser) for DDoS and site admin
A consumer no-logs claim would not apply here. Activity reports are kept 60 days in the Control Panel (help). NordLayer retains end-user data in accordance with the customer’s instructions when acting as processor. Website access logs and payment data are processed as controller.
Help: Control Panel does not track website visits inside the NordLayer client; admins see user/device names, IPs, timestamps and server. NordLayer Browser separately logs visited domains. Data may be transferred worldwide. This is not proof of zero retained data.
- https://nordlayer.com/privacy-policy/ · checked 2026-09-12
- https://help.nordlayer.com/docs/activity-information · checked 2026-09-12
Locations and hosting
Advertised exit countries, physical-versus-virtual evidence, control-plane hosting and account data residency are separate. An Australian exit IP is not Australian data residency.
- Advertised exits
- AU
- Australian exit
- Advertised — not proof of Australian data residency
- Exit location evidence
- Advertised
- Physical vs virtual
- Unknown
- Control-plane hosting
- Overseas
- Account data residency
- Unknown
- Legacy data_hosting field
- Unknown
Shared and private gateway marketing pages list Australia among 40+ locations. Dedicated-IP help lists Australia (Sydney), including as a multi-provider city. Chrome on /vpn-server-locations/ after the Asia Pacific tab printed Australia and Sydney. An Australian / Sydney IP is not Australian account data residency. Control-plane legal entity is New York. Privacy: personal data may be stored, accessed and transferred around the world. Physical versus virtual unknown.
- https://help.nordlayer.com/docs/dedicated-server-with-fixed-ip · checked 2026-09-12
- https://nordlayer.com/features/private-gateway/ · checked 2026-09-12
- https://nordlayer.com/features/shared-gateway/ · checked 2026-09-12
- https://nordlayer.com/vpn-server-locations/ · checked 2026-09-12
Per-platform features
Protocol, kill switch and split tunnel are recorded per platform. Missing documentation stays unknown or not tested.
| Platform | Protocols | Kill switch | Split tunnel |
|---|---|---|---|
| Windows | NordLynx, OpenVPN | Yes | Plan-dependent |
| macOS | NordLynx, OpenVPN | Yes | Plan-dependent |
| iOS | NordLynx, OpenVPN | Yes | Plan-dependent |
| Android | NordLynx, OpenVPN | Yes | Plan-dependent |
| Linux | NordLynx, OpenVPN | Yes | Plan-dependent |
| Browser extension | Other | Not applicable | Plan-dependent |
Windows: Windows 10/11 (ARM from app 3.9.0). Protocol picker documents NordLynx and OpenVPN. Kill switch in General settings; admins can enforce via Windows presets. Gateway include/exclude split tunnelling is Core+ (not on Lite). IKEv2 was removed from apps on 1 Jun 2024; manual IKEv2 servers cut 28 Jun 2025. Not leak-tested. Not supported on Windows Server.
macOS: macOS 14 (Sonoma) and up. NordLynx and OpenVPN in Preferences. Kill switch toggle documented. Split tunnelling is gateway-level on Core+, not a documented per-app macOS control. IKEv2 not in-app.
iOS: iOS 16.0 and up. In-app VPN Protocol picker: disable Select automatically, choose NordLynx or OpenVPN. Kill switch in General after reconnect. Split tunnelling is not an iOS per-app control in the help opened.
Android: Android 13 and up. In-app protocol picker. Kill switch needs extra permissions, then reconnect. Split tunnelling is gateway-level on Core+.
Linux: Debian/RHEL-based physical clients (help lists Debian 12/13, Fedora 43/44, Ubuntu 22.04/24.04/26.04, openSUSE Tumbleweed). nordlayer settings set: preferred protocol, kill switch. Not officially supported on Linux Server. Non-Windows ARM: NordLynx only. Manual OpenVPN is documented for devices without the usual OS (Core+ compare table).
Browser extension: Chrome, Brave, Firefox, Edge. Compare table: Browser Extension not included on Lite or Core; included on Premium. URL-based exclude split tunnelling is Browser Extension only (Premium). Not a full-tunnel OS VPN. Kill switch N/A.
Device limits and free tier
- Devices
- 6
- Concurrent connections
- 6
- Free tier
- No free tier
- Free-tier data cap
- Unknown
No free plan on nordlayer.com. 14-day money-back applies to an initial purchase only (Terms §6); renewals, partner purchases and a second refund are excluded. A homepage coupon is not a free tier. NordLayer Intelligence and NordPass are separately sold.
Business controls
Some controls are plan-dependent. Do not infer them from a consumer tier.
- SSO
- Yes
- MFA
- Yes
- Device posture
- Plan-dependent
- Access policies
- Plan-dependent
- Audit logs
- Yes
- Private resource access
- Plan-dependent
- Public internet egress
- Yes
- Minimum seats
- 5
Reviewed starting SKU is Lite (5-user minimum). Lite: shared gateways, MFA, SSO (Okta, Entra ID, OneLogin, Google, JumpCloud), activity reports, Always On, session-duration controls. Core adds Virtual Private Gateways (dedicated IP required), IP allowlisting, gateway split tunnelling, DNS/application controls; Device Posture Security is an add-on on Core and included on Premium. User provisioning (Entra ID/Okta SCIM) is an add-on until Premium. Site-to-site, Cloud LAN and Browser Extension are Premium. Do not infer private-resource access from the Lite shared-gateway grid or from NordVPN. Enterprise offer (200 seats, Let's talk) is not the listed starting SKU.
Audit register
UAB Sertika
Vendor help: ISO/IEC 27001:2022 information security management system for Nord Security, certificate issued by UAB Sertika, applies to NordLayer and NordPass Business. Marketing ISO page: NordLayer’s ISMS is certified to ISO/IEC 27001:2022. Trust Center lists “NordLayer ISO 27001 Certificate” behind Request Access (updated 22 Jul 2026 on the portal chrome). Guessed public PDF paths were not used.
- Report date
- Unknown
- Availability
- Announcement only
- Inspection
- Not independently inspected
A vendor help page and a Request-gated Trust Center row are not an inspected independent report. Request Access was not submitted. Certificate date was not printed on the public pages opened.
unknown
Dual public SOC 2 copy on 12 Sep 2026: nordlayer.com/pricing/ says information security policies meet SOC 2 Type I requirements; help.nordlayer.com/docs/security-compliance and the ISO marketing page say SOC 2 Type 2. Homepage badge: SOC 2 compliant. Auditor name and report date were not printed on the public pages opened. Trust Center documents were Request-gated.
- Report date
- Unknown
- Availability
- Announcement only
- Inspection
- Not independently inspected
Type I versus Type 2 is unresolved dual public copy. A vendor badge is not an inspected independent report. No public PDF was opened.
unknown
Help: independent assessors reviewed policies, standards and procedures that apply to NordLayer and concluded they meet the security objectives in the HIPAA Security Rules. Trust Center lists “NordLayer HIPAA Report” behind Request Access.
- Report date
- Unknown
- Availability
- Announcement only
- Inspection
- Not independently inspected
A vendor HIPAA-compliant claim and a Request-gated report row are not an inspected independent report. Request Access was not submitted.
When this was checked
Status as of (page snapshot) against a 90-day review target. Checked dates are not updated when the site is rebuilt.
Editorial article date: . That is not proof that pricing, hosting, or compliance was re-checked.
- PricingVerified
Verified — checked 12 September 2026.
USD. Yearly Lite/Core/Premium US$8/11/14 user/month; payload monthlyPrice US$10/14/18. 5-user minimum. Dedicated IP +US$40/mo yearly on Core/Premium. Tax additional. Checkout not started. Coupon not applied.
- HostingUnknown
Unknown — checked date 12 September 2026 is not field-level evidence on its own.
Advertised Australia/Sydney gateways only. Account/control-plane hosting and data residency were not named as Australia. Unknown is not AU.
Subscription pricing
Prices below are in USD, not AUD. ex GST. An effective monthly equivalent is not a cancellable monthly price. Verified — checked 12 September 2026. Source: nordlayer.com/pricing.
Cancellable month-to-month Lite from the public pricing-page payload monthlyPrice: 10 (12 Sep 2026). 5 users minimum. USD; tax calculated additionally. Shared gateways only — not a Virtual Private Gateway SKU. Chrome Monthly-label click did not switch the visible yearly cards; this figure is the vendor monthlyPrice field on the same page, not a checkout quote. Get started was not clicked.
- Introductory billed total
- 10.00 USD per user
- Term
- 1 month
- Bonus months
- None
- Effective monthly equivalent
- 10.00 USD effective monthly equivalent — not a cancellable monthly price (per user)
- Renewal
- 10.00 USD / 1 month per user
- Month-to-month option
- 10.00 USD per user
Checked 2026-09-12
Default yearly grid 12 Sep 2026: US$8 user/month, SAVE 20%, 5 users minimum. Hand check 8*12=96 (US$96/user/year billed). US$8/mo is not cancellable monthly. Tax calculated additionally. Homepage coupon nl-fall-26 (10% off annual) was not applied. Shared gateways; no dedicated IP.
- Introductory billed total
- 96.00 USD per user
- Term
- 12 months
- Bonus months
- None
- Effective monthly equivalent
- 8.00 USD effective monthly equivalent — not a cancellable monthly price (per user)
- Renewal
- 96.00 USD / 12 months per user
- Month-to-month option
- 10.00 USD per user
Checked 2026-09-12
Dedicated IP is mandatory and charged separately. Its billed schedule is not verified; the seat subtotal is not the full payable cost.
monthlyPrice 14 on the public pricing payload. 5 users minimum. Dedicated IP add-on required: monthly disclaimer +US$50/month (not mixed into the seat price). Tax calculated additionally. Checkout not started.
- Introductory billed total
- 14.00 USD per user
- Term
- 1 month
- Bonus months
- None
- Effective monthly equivalent
- 14.00 USD effective monthly equivalent — not a cancellable monthly price (per user)
- Renewal
- 14.00 USD / 1 month per user
- Month-to-month option
- 14.00 USD per user
Checked 2026-09-12
Dedicated IP is mandatory and charged separately. Its billed schedule is not verified; the seat subtotal is not the full payable cost.
TOP CHOICE yearly card: US$11 user/month, SAVE 21%, 5 users minimum. Hand check 11*12=132 (US$132/user/year). Dedicated IP +US$40/month required on the yearly grid — extra, not in the seat billed total. First SKU with Virtual Private Gateways. US$11/mo is not cancellable monthly.
- Introductory billed total
- 132.00 USD per user
- Term
- 12 months
- Bonus months
- None
- Effective monthly equivalent
- 11.00 USD effective monthly equivalent — not a cancellable monthly price (per user)
- Renewal
- 132.00 USD / 12 months per user
- Month-to-month option
- 14.00 USD per user
Checked 2026-09-12
Dedicated IP is mandatory and charged separately. Its billed schedule is not verified; the seat subtotal is not the full payable cost.
monthlyPrice 18 on the public pricing payload. 5 users minimum. Dedicated IP add-on required: monthly disclaimer +US$50/month. Tax calculated additionally. Cloud Firewall, Device Posture Security and Browser Extension are on Premium in the compare table.
- Introductory billed total
- 18.00 USD per user
- Term
- 1 month
- Bonus months
- None
- Effective monthly equivalent
- 18.00 USD effective monthly equivalent — not a cancellable monthly price (per user)
- Renewal
- 18.00 USD / 1 month per user
- Month-to-month option
- 18.00 USD per user
Checked 2026-09-12
Dedicated IP is mandatory and charged separately. Its billed schedule is not verified; the seat subtotal is not the full payable cost.
Yearly grid: US$14 user/month, SAVE 22%, 5 users minimum. Hand check 14*12=168 and 14/18≈22% off the monthlyPrice 18. Dedicated IP +US$40/month required. US$14/mo is not cancellable monthly. Enterprise offer (from US$6, 200-user minimum, Let's talk) is a sales quote and is not stored as a billed SKU.
- Introductory billed total
- 168.00 USD per user
- Term
- 12 months
- Bonus months
- None
- Effective monthly equivalent
- 14.00 USD effective monthly equivalent — not a cancellable monthly price (per user)
- Renewal
- 168.00 USD / 12 months per user
- Month-to-month option
- 18.00 USD per user
Checked 2026-09-12
Compare NordLayer subscription cash outlay
Observed price changes
Recorded when a listed price changed. This is not a complete vendor timeline.
- First capture from nordlayer.com/pricing/ (AU Chrome + curl). Yearly Lite/Core/Premium US$8/11/14 user/month; payload monthlyPrice US$10/14/18. 5-user minimum. Dedicated IP +US$40/mo yearly / +US$50/mo monthly on Core and Premium. USD; tax additional. Checkout not started. Coupon nl-fall-26 not applied.
Pros & Cons
Pros
- Public site loaded in an Australian session on 12 Sep 2026 without a Cloudflare challenge
- Yearly and monthly per-user USD figures are printed or present in the pricing-page payload (tax additional)
- Cancellable monthly Lite is documented at US$10 — separate from the yearly US$8 teaser
- Five-user minimum and six devices per member are documented
- MFA and SSO (Okta, Entra ID, OneLogin, Google, JumpCloud) included on Lite
- Advertised Australia / Sydney dedicated-IP and shared/private gateway locations
- NordLynx (WireGuard-based) and OpenVPN documented on Windows, macOS, iOS, Android and Linux
- Kill switch documented on those five OS apps; 14-day money-back on an initial purchase; 24/7 chat/email on Lite
Cons
- US$8/user/month on the yearly Lite card is an effective monthly equivalent, not a cancellable monthly price
- USD with tax calculated additionally — not an AUD GST-inclusive grid; checkout was not started
- Lite has no Virtual Private Gateway; dedicated IP +US$40/mo (yearly) is required from Core
- Device Posture Security that can block non-compliant devices is not on Lite (add-on on Core, included on Premium)
- ISO 27001 certificate and HIPAA report are Trust Center Request-gated and were not inspected
- SOC 2 Type I (pricing) versus Type 2 (help) is dual public copy
- Australian / Sydney IPs are not Australian data residency; physical vs virtual remains unknown
- No free plan; partner purchases follow the partner refund policy; homepage coupon nl-fall-26 is not the list price
- No independent speed, leak-test or streaming-unblocking results in this review
How this review was made
Reviews separate vendor documentation, editorial analysis and firsthand records. They are not interchangeable.
- Vendor documentation — Public pages from NordLayer and other sites. Recorded HTTP(S) URLs are listed under Sources. A source URL is a document we recorded, not a claim that every sentence on this page was checked against that URL.
- Editorial analysis — SoftwareHQ's written verdict and scores for Australian buyers. The header score is an editorial assessment, not a user-review average, not a lab result, and not a number derived from how many evidence records exist.
- Firsthand records — This review has no firsthand observation records, trial walkthroughs, or screenshots from a logged-in SoftwareHQ account. Missing tests stay not tested.
This page does not rank products by speed or security from documentation or from evidence count.
Checked by SoftwareHQ Editorial Team. There is no named author profile for this page; attribution stays with the SoftwareHQ editorial team. How we test and the editorial policy for scoring, independence and affiliate rules.
Sources
Public pages recorded when this review was compiled. They are not a checklist that every claim was verified, and they are not evidence of hands-on product testing.
- Nordlayer official site
- Nordlayer pricing
- Nordlayer Terms Of Service
- Nordlayer privacy policy
- Nordlayer Data Processing Agreement
- Nordlayer about
- Nordlayer Vpn Server Locations
- Nordlayer Private Gateway
- Nordlayer Shared Gateway
- Nordlayer Vpn Split Tunneling
- Nordlayer Dedicated Ip
- Nordlayer Download
- Nordlayer Security Compliance (nordlayer.com)
- Nordlayer Iso 27001
- Nordlayer Press Area
- Trust official site
- Nordlayer Security Compliance (help.nordlayer.com)
- Nordlayer Step 1 Choose Plan And Sign Up
- Nordlayer How Nordlayer Works
- Nordlayer How Many Devices Can Be Used With A Nordlayer Account
- Nordlayer Device Limit Reached
- Nordlayer Kill Switch
- Nordlayer Nordlynx
- Nordlayer Does Nordlayer Support The Ikev2 Vpn Protocol
- Nordlayer What Are Nordlayer Vpn Split Tunneling Options
- Nordlayer Enable Ip Based Split Tunneling
- Nordlayer Dedicated Server With Fixed Ip
- Nordlayer Activity Information
- Nordlayer Mfa Sso
- Nordlayer What Is Your Refund Policy
- Nordlayer What Currency Are Your Prices In
- Nordlayer Operating Systems
- Nordlayer How To Cancel Nordlayer Subscription
- Nordsecurity Trademark Policy
- Nordsecurity about
NordLayer Alternatives
If NordLayer doesn’t quite fit your needs, consider these alternatives for Australian businesses:
- Tailscale — WireGuard mesh overlay with hosted coordination; public internet egress is opt-in. Free plan available.
- Twingate — Hosted ZTNA overlay; self-managed Connectors; USD seats, not a browsing VPN. Free plan available.
- Cloudflare One — Hosted SASE/ZTNA; PAYG is US$7/user/month billed annually, not a browsing VPN. Free plan available.
Buyer guide
Source-based VPN guides for NordLayer: what a VPN encrypts, billed-term cash, free versus paid caps, how intro differs from renewal, how to read audits, how kill switch, split tunnel and protocols vary by OS, and when a consumer exit is the wrong product for company resources. Not a ranking.