Skip to content

Enterprise

For companies whose security team asks first.

Enterprise adds no module Professional lacks — by Professional you already have all sixteen. It differentiates on governance, scale and support, which is the honest way to sell a top tier.

SSOREST API & webhooksCustom rolesBulk audit exportData region

If a vendor’s top tier is where the audit log lives, the audit log was a bargaining chip. Ours is on Starter.

The five questions

What your security review will ask, in order

These ride the same entitlement table the modules do and are checked by the same gate — so what your contract says and what your workspace opens cannot drift apart.

  1. 01

    Can our identity provider own who gets in?

    Single sign-on over SAML or OIDC. Your IdP decides who may sign in, and removing somebody there removes them here — which is the answer to the joiner-leaver question underneath this one.

    SSO
  2. 02

    Can we read this from our own systems?

    A REST API and webhooks over the same records the screens use, through the same five gates. An integration cannot see more than the account behind it — a token is not a bypass.

    API
  3. 03

    Our roles do not match your templates.

    Edit the permission matrix past the twenty-six we ship. Every grant still obeys the delegation rules, so a role can be narrowed but never widened beyond the person granting it.

    Custom roles
  4. 04

    Our auditor wants the whole log, not a screen.

    Bulk audit export. The application itself cannot modify that log, which is the property that makes the export worth anything to an auditor.

    Audit export
  5. 05

    Where do the rows physically live?

    A choice of data region for this workspace, agreed in the contract rather than assumed from where you signed up.

    Data region

Already yours

Six things this tier does not sell you.

Worth stating plainly, because in most of this category they are exactly what the top tier is for. Here they are on Starter, and on the trial, and on the workspace you open in the next minute.

The detail is on the security page.

  • Role-based access across sixteen modules
  • Row-level isolation enforced by the database
  • An audit trail the application cannot modify
  • Opt-in, read-only, time-limited support access
  • Encryption, backups and rehearsed restores
  • Data export

Talk to us

Enterprise pricing is quoted, and a person does the quoting.

Tell us the shape of the company and what your security review needs to see. We will come back with the specifics rather than a brochure — and we will say so plainly if the answer to one of your questions is no.

Talk to enterprise

A person reads this, and a person replies to it.

We use this to reply to you. Nothing else.