Skip to content
NEW: Martech Stack Builder on your phone →

For Enterprise

Built for Legal, Security, and Procurement Review

Required 2FA for every member, a 365-day audit log with CSV export, and vendor contracts encrypted with a key per workspace. The answers your security team will ask for, in the product.

Talk to sales Read the security page

What Enterprise adds

The controls security and procurement reviews ask about.

Required 2FA

Authenticator-app (TOTP) 2FA for every user. Owners and admins can require it for the whole workspace: members without it are sent to set it up before the app opens, and the database refuses contract data to any session that has not passed 2FA. Works with Google sign-in.

  • · QR-code enrolment; removing 2FA needs a current code
  • · Toggle in Team Hub → Settings (Enterprise)
  • · A code on every new session once 2FA is on

365-day audit log

Member and role changes, sharing, and every contract event. Filter by category and date; export to CSV for a compliance review or your SIEM.

  • · Actor name and email on every event
  • · Contract access written by our servers, never the browser
  • · No one can edit or delete an event through the app or API

Encrypted vendor contracts

Upload MSAs, SLAs, DPAs and order forms. The extracted text, terms, clause text and search passages are encrypted with a key that belongs to your workspace alone (Supabase Vault, AES-256).

  • · Download links expire after 60 seconds
  • · AI processing only after an owner or admin consents
  • · AI Chat over contracts with verbatim clause citations

Sign-in without passwords

People sign in with an emailed magic link or with Google. We store no passwords. Single sign-on (SAML) is in progress, not in the product yet.

  • · Magic link or Google
  • · Optional or required 2FA
  • · Single sign-on (SAML): in progress

Governance workflows

Stack changes flow through a change request, approval and a recorded history, and an approved change can be applied to the canvas or pushed to JIRA. External stakeholders sign off on a link, no account required. Department ownership and roles keep each tool's owner clear.

Proposals

Describe a stack change and the tools it affects, then route it to approvers.

External approvals

Procurement / legal sign-off without an account.

Departments

Map each tool to its owning team and run cost reports by department.

Enterprise pricing

Annual plans from about $12k, agreed with us. Includes everything in Team, plus the Enterprise controls below.

Enterprise
From about $12k /year

Annual plans, sold by conversation rather than checkout. Talk to us.

  • ✓ Everything in Team
  • ✓ Team MFA enforcement
  • ✓ 365-day audit log + CSV export
  • ✓ Contract management, encrypted per workspace
  • ✓ Contract search in Slack and, after opt-in, agreement tools over MCP
  • ✓ Data processing agreement
  • ✓ Dedicated onboarding
  • ✓ Priority support
  • ✓ Unlimited seats
Talk to sales

Frequently Asked Questions

What’s the difference between Team and Enterprise?
Team gives you collaborative workspaces, role-based access, shared diagrams and a 30-day audit log. Enterprise adds contract management with a separate encryption key per workspace, the option to require 2FA for every member, a 365-day audit log with CSV export, and priority support.
Do you support SSO?
Single sign-on (SAML) is in progress, not available yet. Today people sign in with an emailed magic link or with Google, and we store no passwords. Enterprise owners can require two-factor authentication for every member.
How does the audit log work?
It records member and role changes, sharing, and every contract event: uploads, changes, deletions, extractions, downloads, AI answers, MCP reads and decryptions. Contract events are written by our servers, not the browser. Enterprise keeps 365 days, filterable by category and date, with CSV export.
How is contract data secured?
Each workspace has its own AES-256 key in Supabase Vault. The extracted text, terms, clause text and search passages are encrypted with it (pgcrypto); the uploaded file has Supabase’s disk encryption. Downloads use links that expire after 60 seconds. Every decryption is recorded in the workspace’s audit log, including any by our own staff.
Is there a custom MSA / DPA available?
Yes. Enterprise agreements include a data processing agreement, and we will review your own paper.

Give your security review the answers up front

Required 2FA, a 365-day audit log and encrypted contracts. Already in production with airline, insurance, and consulting customers.

Talk to sales Read the security page

No credit card required. Free plan available.