Enterprise

For teams with a procurement process

Everything in Business, with the contractual and support commitments a larger organisation needs before it can adopt anything. Priced per agreement, after a conversation about what you actually need.

Business or Enterprise

Everything in Business, with the commitments a procurement process needs in writing. Larger deployments, including running Flitch in your own cloud, are scoped per agreement.

CapabilityBusinessEnterprise
Teams under one businessUnlimitedUnlimited
Single sign-on (SAML & OIDC)
Domain-verified sign-in
Audit log across every team
Audit export (CSV, JSON, OCSF) and SIEM API
SCIM provisioning from your directoryUnder agreement
Price$40/user/moPer agreement
ContractStandard termsYour paper or ours
Invoicing and purchase orders
SupportStandardPriority
Response time SLAAgreed in contract
Dedicated support channel
Security questionnaire support
EU data residencyOn request
Bring your own AI provider keyUnder agreement
Run Flitch in your own cloudUnder agreement

Every ticked capability is available today. Anything marked under agreement is scoped in a technical discovery call rather than promised here.

Security review

Flitch holds neither a SOC 2 report nor ISO 27001 certification today. Both are planned, and we would rather tell you where we are than have it surface halfway through your assessment. What we do have is documented and public: how data is isolated between customers, what we encrypt and where, which sub-processors we use, and how sign-in works when it runs through your own identity provider.

Read the security overview, the sub-processor list and the data processing agreement. If your assessment needs something not covered there, ask and we will answer it directly.

If either is a requirement for your review, tell us which one and we will keep you updated on where it is.

Common questions

There is no published price, because what Enterprise includes depends on what your organisation needs. Tell us how many teams you have and what your security and contract requirements are, and we will come back with a number.

Neither today. Both are planned, and we would rather say where we are than have it surface halfway through your assessment. What we do have is public and specific: how data is isolated between customers, what is encrypted and where, our sub-processors, and how sign-in works through your own identity provider. Tell us which one your review requires and we will let you know when it lands.

Business capabilities are available the moment your plan is active, including single sign-on, which you configure yourself. Anything beyond that is scoped in a technical discovery call rather than promised up front.

Yes, on Business and Enterprise. Okta and Microsoft Entra are supported over both SAML and OIDC, you verify your domain with a DNS record, and your own multi-factor and conditional access policies apply unchanged. Flitch stores no passwords at all.

Under an Enterprise agreement, yes. You connect your own Anthropic, OpenAI or Google account and the model cost is billed there by your provider, at your negotiated rates, instead of drawing down a credit allowance. Prompts and the AI work behind what you build then run against a provider account you control, which is often what a review is really asking about. It is scoped after a technical discovery call, so raise it early.

Deployment in your own cloud is available under qualifying Enterprise agreements. It is scoped after a technical discovery call, so raise it early in the conversation.

Us. Flitch is small enough that the people who answer your security questionnaire are the people who build the product, which is usually faster than a support tier.

Tell us what your review needs

How many teams, which identity provider, and what your security and contract requirements are. We will come back with next steps.