Enterprise

The controls your security team is already asking for.

SSO, SCIM, audit logs, EU/US residency and a named CSE. Master lives inside the boundaries your platform team has already drawn.

Identity
SAML 2.0 SSO and SCIM 2.0 with your existing IdP
Residency
EU (Frankfurt) or US (Virginia)
Availability
99.9% uptime SLA with service credits
Support
Named CSE and 24/7 incident response

Capabilities for IT, security and platform teams.

SAML SSO

Okta, Entra ID, Google Workspace, JumpCloud and any SAML 2.0 IdP.

SCIM provisioning

Automatic create, update and deprovision. Group-to-role mapping.

Audit log

Every workspace action, exportable to your SIEM via webhook.

Granular RBAC

Workspace, project and environment-scoped roles with custom permissions.

Data residency

Choose EU or US. Single-tenant deployment available on request.

DPA & custom terms

Signed DPA, custom MSA, security questionnaires turned around in days.

How rollouts work

Four weeks from signature to first production app.

A predictable rollout owned by a named customer success engineer, with security and enablement built in.

  1. Week 1

    Kickoff & security review

    We meet with your security and platform teams, walk through the architecture, and finalize the DPA.

  2. Week 2

    SSO, SCIM & workspaces

    We configure your IdP, set up role mappings, and provision the first cohort of workspaces.

  3. Week 3

    Hands-on enablement

    Live workshops for builders and admins, plus a private channel with your CSE.

  4. Week 4+

    QBRs & expansion

    Quarterly business reviews, usage analysis, and roadmap input from your team.

What an Enterprise agreement covers.

Business
Enterprise
Authentication
Email, Google, Apple
SAML SSO + SCIM provisioning
Roles
Workspace roles
Project and environment-scoped RBAC
Audit log
Project history
Full workspace log, exportable to your SIEM
Data residency
Default region
EU or US, single-tenant on request
Contracts
Standard terms
Signed DPA, custom MSA, security review
Support
Priority support
Named CSE, 24/7 incident response, SLA
Security & compliance

Read the security overview, our subprocessor list and the latest pen-test summary.

View security

Frequently asked

Do you offer SSO and SCIM?+

Yes. SAML 2.0 SSO and SCIM 2.0 provisioning are included on the Enterprise plan, with support for Okta, Entra ID, Google Workspace and JumpCloud.

Where is data hosted?+

Choose between EU (Frankfurt) and US (Virginia) regions. Custom or single-tenant deployments are available on request.

What's the SLA?+

99.9% uptime SLA with service credits. 24/7 incident response is included with Enterprise.

Can we sign a DPA and custom MSA?+

Yes. We countersign DPAs that reference SCCs, and our legal team can negotiate the MSA with yours.

How does pricing work?+

Custom contracts based on credit pools, seats and support tier. Annual or multi-year terms available.

How does onboarding work?+

Every Enterprise customer gets a named customer success engineer, a kickoff workshop, and quarterly business reviews.

Talk to an enterprise lead.

Tell us about your IdP, residency and rollout timing. We'll come back with a tailored plan within one business day.