The controls your security team is already asking for.
SSO, SCIM, audit logs, EU/US residency and a named CSE. Master lives inside the boundaries your platform team has already drawn.
Selected enterprise customers
Capabilities for IT, security and platform teams.
SAML SSO
Okta, Entra ID, Google Workspace, JumpCloud and any SAML 2.0 IdP.
SCIM provisioning
Automatic create, update and deprovision. Group-to-role mapping.
Audit log
Every workspace action, exportable to your SIEM via webhook.
Granular RBAC
Workspace, project and environment-scoped roles with custom permissions.
Data residency
Choose EU or US. Single-tenant deployment available on request.
DPA & custom terms
Signed DPA, custom MSA, security questionnaires turned around in days.
Four weeks from signature to first production app.
A predictable rollout owned by a named customer success engineer, with security and enablement built in.
- Week 1
Kickoff & security review
We meet with your security and platform teams, walk through the architecture, and finalize the DPA.
- Week 2
SSO, SCIM & workspaces
We configure your IdP, set up role mappings, and provision the first cohort of workspaces.
- Week 3
Hands-on enablement
Live workshops for builders and admins, plus a private channel with your CSE.
- Week 4+
QBRs & expansion
Quarterly business reviews, usage analysis, and roadmap input from your team.
"Procurement, security review and IdP rollout took three weeks. The first internal tool replaced a six-month engineering project."
"The audit log integrates straight into our SIEM. Our security team approved Master faster than tools they've used for years."
Read the security overview, our subprocessor list and the latest pen-test summary.
Frequently asked
Do you offer SSO and SCIM?+
Yes. SAML 2.0 SSO and SCIM 2.0 provisioning are included on the Enterprise plan, with support for Okta, Entra ID, Google Workspace and JumpCloud.
Where is data hosted?+
Choose between EU (Frankfurt) and US (Virginia) regions. Custom or single-tenant deployments are available on request.
What's the SLA?+
99.9% uptime SLA with service credits. 24/7 incident response is included with Enterprise.
Can we sign a DPA and custom MSA?+
Yes. We countersign DPAs that reference SCCs, and our legal team can negotiate the MSA with yours.
How does pricing work?+
Custom contracts based on credit pools, seats and support tier. Annual or multi-year terms available.
How does onboarding work?+
Every Enterprise customer gets a named customer success engineer, a kickoff workshop, and quarterly business reviews.
Talk to an enterprise lead.
Tell us about your IdP, residency and rollout timing. We'll come back with a tailored plan within one business day.
