Enterprise

The controls your security team is already asking for.

SSO, SCIM, audit logs, EU/US residency and a named CSE. Master lives inside the boundaries your platform team has already drawn.

Selected enterprise customers

Lumen HealthVolta LogisticsNorthwindHalcyonAurora BankStudio NorrField & FormGreylake

Capabilities for IT, security and platform teams.

SAML SSO

Okta, Entra ID, Google Workspace, JumpCloud and any SAML 2.0 IdP.

SCIM provisioning

Automatic create, update and deprovision. Group-to-role mapping.

Audit log

Every workspace action, exportable to your SIEM via webhook.

Granular RBAC

Workspace, project and environment-scoped roles with custom permissions.

Data residency

Choose EU or US. Single-tenant deployment available on request.

DPA & custom terms

Signed DPA, custom MSA, security questionnaires turned around in days.

How rollouts work

Four weeks from signature to first production app.

A predictable rollout owned by a named customer success engineer, with security and enablement built in.

  1. Week 1

    Kickoff & security review

    We meet with your security and platform teams, walk through the architecture, and finalize the DPA.

  2. Week 2

    SSO, SCIM & workspaces

    We configure your IdP, set up role mappings, and provision the first cohort of workspaces.

  3. Week 3

    Hands-on enablement

    Live workshops for builders and admins, plus a private channel with your CSE.

  4. Week 4+

    QBRs & expansion

    Quarterly business reviews, usage analysis, and roadmap input from your team.

"Procurement, security review and IdP rollout took three weeks. The first internal tool replaced a six-month engineering project."
Asha Devlin
Director of Platform Engineering, Lumen Health
"The audit log integrates straight into our SIEM. Our security team approved Master faster than tools they've used for years."
Marek Rybar
CISO, Aurora Bank
Security & compliance

Read the security overview, our subprocessor list and the latest pen-test summary.

View security

Frequently asked

Do you offer SSO and SCIM?+

Yes. SAML 2.0 SSO and SCIM 2.0 provisioning are included on the Enterprise plan, with support for Okta, Entra ID, Google Workspace and JumpCloud.

Where is data hosted?+

Choose between EU (Frankfurt) and US (Virginia) regions. Custom or single-tenant deployments are available on request.

What's the SLA?+

99.9% uptime SLA with service credits. 24/7 incident response is included with Enterprise.

Can we sign a DPA and custom MSA?+

Yes. We countersign DPAs that reference SCCs, and our legal team can negotiate the MSA with yours.

How does pricing work?+

Custom contracts based on credit pools, seats and support tier. Annual or multi-year terms available.

How does onboarding work?+

Every Enterprise customer gets a named customer success engineer, a kickoff workshop, and quarterly business reviews.

Talk to an enterprise lead.

Tell us about your IdP, residency and rollout timing. We'll come back with a tailored plan within one business day.