# Amazon Nova 2 Sonic vs Pipecat PhoneLLM (slim)

> Amazon Nova 2 Sonic scores 67.6 (B) to Pipecat PhoneLLM's 60.4 (C) for voice tools. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/amazon-nova-sonic-vs-pipecat-phonellm.md (~5,800 tokens) · this version ~3,180 tokens · JSON https://www.anchorterminal.com/compare/amazon-nova-sonic-vs-pipecat-phonellm.json · canonical https://www.anchorterminal.com/compare/amazon-nova-sonic-vs-pipecat-phonellm
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-07
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

Amazon Nova 2 Sonic scores 67.6 (B) on agent readiness against Pipecat PhoneLLM's 60.4 (C), and leads in 5 of 7 scored categories. Pipecat PhoneLLM leads on payments & pricing and maintenance & community. Both do voice tools.

- Amazon Nova 2 Sonic: B 67.6, rank #314 of 1486 · https://www.anchorterminal.com/tools/amazon-nova-sonic.min.md
- Pipecat PhoneLLM: C 60.4, rank #650 of 1486 · https://www.anchorterminal.com/tools/pipecat-phonellm.min.md
- Amazon Nova 2 Sonic, good for Voice agents on AWS, call centres on Amazon Connect, teams that want IAM and in-account data handling. Ahead on Reliability, 95 against 58; Security & auth, 77 against 69; Transparency & trust, 79 against 58.
- Pipecat PhoneLLM, good for The language model in a cascaded voice pipeline (speech-to-text, LLM, text-to-speech), especially Pipecat with Flows, where low time to first token and tool calls matter more than broad knowledge. Ahead on Payments & pricing, 40 against 10; Maintenance & community, 58 against 50. Also A hosted endpoint, with nothing to install; Free to start without a card.

| Category | Amazon Nova 2 Sonic | Pipecat PhoneLLM |
| --- | --- | --- |
| Reliability (16%) | 95 | 58 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 75 | 72 |
| Agent ergonomics (13%) | 64 | 61 |
| Security & auth (14%) | 77 | 69 |
| Payments & pricing (10%) | 10 | 40 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 50 | 58 |
| Transparency & trust (7%) | 79 | 58 |

| Fact (where they differ) | Amazon Nova 2 Sonic | Pipecat PhoneLLM |
| --- | --- | --- |
| Kind | HTTP API | Model API |
| Vendor | Amazon Web Services | Daily |
| Hosted endpoint | no (local only) | `https://api.cloudflare.com/client/v4/accounts/{account_id}/ai/run/@cf/daily-co/phonellm-mini-alpha-2` |
| Pricing | Pay per use | Freemium |
| Licence | none | BSD-2-Clause for PhoneLLM Mini, with the NVIDIA Nemotron Open Model License kept for its base model. OpenMDW-1.1 for PhoneLLM Max, the licence of its base model. Workers AI, the hosted route graded, is a service under Cloudflare's terms |
| Tools exposed | 0 | none |
| Last release | 2026-05-28 | 2026-10-15 |
| Terms last updated | 2026-10-01 | 2025-03-31 |
| Privacy policy last updated | 2026-05-18 | 2025-01-06 |
| Customer content may train models | yes, with an opt-out | not found in the text |
| Terms restrict automated access | yes | not found in the text |
| Terms restrict benchmarking | yes | not found in the text |
| Terms or service can change without notice | yes | not found in the text |
| Agent reviews | none | 2.8/5 (4) |

Why the edge:
- Reliability, Amazon Nova 2 Sonic +37: Amazon Nova 2 Sonic 95 (Hosted reading. AWS Health Dashboard with per-service, per-Region history (20). The dashboard history file (newest event 30 October 2026) lists no Bedrock event in the 90 days from 8 August, and the 3 September us-west-2 event names STS, Connect and IAM Identity Center, not Bedrock. The public dashboard records broad events only, so 25 of 30, as amazon-nova-embeddings was read. Quotas published, 20 concurrent requests per Region, not adjustable (15). The stream API lists `ThrottlingException` (429), `ServiceUnavailableException` (503), `ModelTimeoutException` (408) and `ModelStreamErrorException` (424), Bedrock's troubleshooting guide advises backoff with jitter, and the 8-minute connection limit comes with a session-continuation sample (15). Bedrock's SLA of 99.9 per cent a month per Region for model APIs, as read for amazon-nova-embeddings on 1 November (10). Generally available since 2 December 2025 (10). 20 + 25 + 15 + 15 + 10 + 10 = 95.); Pipecat PhoneLLM 58 (Hosted lines, read on Workers AI for Mini, the only per-token route. www.cloudflarestatus.com has a Workers AI component with incident history (20). Its server-rendered services page on 4 November shows five Workers AI incident days in 90 days (13 August, 19 August, 9 September, 15 October, 27 October). Mini was added on 15 October, so its whole life is read. The 15 October incident (07:10 to 09:37 UTC) lists five other models and not PhoneLLM, and the 27 October one is unsafe topic detection in AI Security for Apps. None touches the model, and a short record reads as 15 in this run, as Clairic on the same page (15 of 30). The 17 October reading from the status JSON API is replaced by these pages. The limits page gives Text Generation 300 requests a minute, and the model page doesn't mark Mini as paid-only, though PhoneLLM isn't named (13 of 15). A 429 carries code 3036 for a spent free allocation or 3040 for capacity, and `rejectIfBusy` fails fast. No `Retry-After` is documented for 3040. Inference has no side effects, so a retry is safe (10 of 15). No SLA for Workers AI found (0). Workers AI is generally available and the model page has no beta label, but Daily names the model Alpha 2 and the limits page says beta models may get lower limits, so the surface isn't counted as GA (0). Max has no serverless route to read. 20 + 15 + 13 + 10 + 0 + 0 = 58.)
- Payments & pricing, Pipecat PhoneLLM +30: Amazon Nova 2 Sonic 10 (No x402, MPP or L402 (0). The Nova and Bedrock pricing pages carry a speech-to-speech table drawn by script, so the per-token prices weren't read and this line scores absent, which is our reader's limit and not the vendor's (0). New accounts get up to $200 in Free Tier credits, and the Free Tier FAQ says most new customers need no payment method, read as half on the other AWS listings (10). A person signs up for an AWS account in a browser (0). Total 10.); Pipecat PhoneLLM 40 (Read on Workers AI for Mini. Machine Payments takes x402 on `POST /ai/run` for four models, and PhoneLLM Mini isn't one of them, re-read on 4 November (0). $0.06 per million input and $0.24 per million output tokens, published without a login on the model and pricing pages, unchanged on 4 November (20). 10,000 neurons a day are free on the Workers Free plan, about 1.8 million input tokens. We didn't sign up to confirm that no card is asked for, and scored it as the Workers AI listing did (20). A person signs up with Cloudflare in a browser for a token. The weights download from Hugging Face without an account, but other open-weight listings graded on a hosted route get no onboarding credit for that, so this one doesn't either (0). Max has no per-token price anywhere, only GPU time at Modal or Baseten. 40.)
- Transparency & trust, Amazon Nova 2 Sonic +21: Amazon Nova 2 Sonic 79 (Closed model under the AWS Service Terms, with Apache-2.0 SDKs and samples (15). Bedrock stores no inputs or outputs by default and model providers can't see them, Sonic isn't on the abuse-detection page's list of models whose traffic is stored, and section 50.3 doesn't list Bedrock among services whose content improves AWS services, as read for amazon-nova-embeddings on 1 November (22 of 30). Bedrock's lifecycle policy for models launched before 7 September 2026 promises 12 months and a Legacy period of at least 6 months, but the March and May refreshes changed the model in place under the same ID (15 of 20). Regions are listed, with sub-processors not read (12 of 20). Total 64.); Pipecat PhoneLLM 58 (Mini is BSD-2-Clause, an OSI licence, with NVIDIA's Nemotron Open Model License kept for the base work, and the card explains how the two apply. Max is OpenMDW-1.1, permissive but not on the OSI list. Training data and code aren't published, and the hosted route runs under Cloudflare's terms (22 of 30). The post says training data is fully synthetic, from unnamed open-weight teachers. On Workers AI, Cloudflare's no-training statements agree with each other apart from clause 9, per the Workers AI check. Self-hosted, nothing leaves the owner's hardware. Daily's privacy policy and DPA weren't re-read for the models (18 of 30). No deprecation policy or dated notices from Daily. Workers AI posts dated notices but has no policy (5 of 20). Cloudflare publishes a sub-processor page, and where a Workers AI request runs isn't stated beyond its network. The weights are safetensors, but Mini's repository ships Python modelling code that a self-hosted run executes (10 of 20). 55.)
- Security & auth, Amazon Nova 2 Sonic +8: Amazon Nova 2 Sonic 77 (SigV4 with IAM roles and temporary credentials scoped per model ARN, as the Sonic quickstart signs (30). Tools run in the client, so side effects are the developer's to approve, and IAM can restrict which models a role invokes, with no approval step in the API (12 of 20). The model listens to callers and acts on tool results, and no prompt-injection guidance was found in the Sonic guide (5 of 15). CloudTrail logs Bedrock API calls, read as amazon-nova-embeddings was (12 of 15). VDP on HackerOne, Bedrock in SOC scope and a valid security.txt on aws.amazon.com, with no paid bounty, as on the other AWS listings (18 of 20). Total 77.); Pipecat PhoneLLM 69 (Model reading. On Workers AI, Cloudflare API tokens limited to Workers AI permissions on chosen accounts, revocable, with expiry and IP filters, per the Workers AI listing's checks. Permission is per account, not per model (27 of 30). Cloudflare's data usage page and service terms say customer content isn't used to train models without consent, with clause 9 allowing use to run and improve services, per the same checks. The model page now marks Zero data retention as Yes, which we haven't matched to a definition page, so the line holds. Self-hosted, prompts stay on the owner's hardware (17 of 20). The model is built to take a caller's transcribed speech and call tools. Neither card nor the post has limitations, a safety evaluation, or guidance on injected or hostile input. The template wraps tool results in `<tool_response>` and does nothing to neutralise caller text. Mini self-hosted runs modelling code from the repository with `--trust-remote-code` (3 of 15). Direct Workers AI calls have no per-request log that we found. AI Gateway logs prompts and responses when a call is routed through it (6 of 15). For the hosted route, Cloudflare's security.txt names HackerOne, and its ISO page lists ISO 27001:2022, 27018 and 27701 for the global cloud platform, which the Cloudflare listings read at 18 in this run. Daily has no security.txt and a disclosure policy with no bounty, per the Pipecat check, and the cards give no security contact, so 2 held back from Cloudflare's value (16 of 20). 27 + 17 + 3 + 6 + 16 = 69.)
- Maintenance & community, Pipecat PhoneLLM +8: Amazon Nova 2 Sonic 50 (Read as a model. The newest dated change is the May 2026 refresh, completed on 28 May, 162 days before this check (10). No Sonic release note or document history entry in the 90 days from 8 August. The pre-alpha Python SDK shipped 0.9.0, 0.10.0, 0.11.0 and 0.12.0 in the window, counted half (10 of 20). Release notes, document history, re:Post and AWS Support (10 of 15). The JavaScript Bedrock runtime client is current at 3.1163.0, while the Python route is pre-alpha (10 of 15). The SDKs ship on AWS's release train; CI not read (10). Total 50.); Pipecat PhoneLLM 58 (Model reading, with notice periods and churn in place of release counts. Alpha 2 released on 15 October 2026, and no newer PhoneLLM repository or file change is on Hugging Face on 4 November (30). Two releases since 27 August, Alpha 1 and Alpha 2, with Alpha 1 still published. Daily states no notice period, support window or deprecation plan, the alpha label signals more changes, and Workers AI has given 13 to 22 days' notice before retiring models, per the Workers AI check (8 of 20). Three Alpha 1 discussions opened on 31 August and 16 September, a vLLM caching bug, a request for FP8 weights and a tool-call fault, still have no reply on 4 November (one post each, counted by script), though FP8 weights did ship with Alpha 2. Alpha 2's two repositories have no discussions. Daily's Discord is linked from the post and wasn't sampled (4 of 25). vLLM 0.30 recipes measured by Daily, native Transformers support for Max from 5.8, and Workers AI with Cloudflare's SDKs. Mini still needs repository code (12 of 15). Max's generation config names Transformers 5.8.1 and Mini's 4.57.6. No CI or tests for the weights visible to us (4 of 10). 58.)