Custom Enterprise — where the playbook bends.
Most Enterprise buyers don't need to talk to sales — the Enterprise tier is self-serve at $1,500/mo billed annually (or $1,800/mo monthly), with 500K codes, 25M scans/month, 100 seats, SSO + SCIM, 7-year analytics retention, and click-through MSA. This page is for Enterprise Scale: higher limits, negotiated MSA, BAA, EU / FedRAMP data residency, or a custom SLA. If you need any of those, let's talk.
What's included
Identity
SAML 2.0 + OIDC SSO with per-domain enforce flag. SCIM 2.0 auto-provisioning with enterprise extension (manager, cost_center, employee_number). Require-MFA flag rejects assertions without ACR/AMR. Per-org IP allowlist on every API call.
Compliance
SOC 2 Type 2 audit in progress (Q3 2026 target). GDPR + CCPA ready today. 7-year audit log retention default, configurable to 10y+ by contract. CSV export + real-time webhook streaming of audit.* events to your SIEM.
SLA
99.9% uptime on the redirect hot path — that's ≤ 43 minutes of unscheduled downtime per month. Service credits of 10% of monthly fees per 0.1% below target, capped at 50%. Real 30/90-day numbers published at /status/.
Data residency
Pick at contract: US, EU (GDPR-jurisdictioned Cloudflare D1), or FedRAMP. D1 jurisdictions are immutable at creation, so residency choice is final for the contract life — we don't silently migrate your scan data.
Custom limits
Baseline 500K codes, 1B scans/mo, 100 seats, 50 teams, 3y analytics retention. Every number overridable per-contract via plan_overrides. Zero hardcoded ceilings — the schema is designed for this.
Support
Dedicated CSM on dedicated-tier contracts. 4-hour priority response on business-critical issues, 1 business day otherwise. Escalations route through a named Slack channel or via your existing support tooling.
Billing
Annual invoicing via Stripe Invoicing, POs accepted, NET-30 / NET-45 terms. Multi-year discounts available. Monthly self-serve stays as an option for teams that outgrow Agency but haven't yet signed an MSA.
Legal
MSA + DPA on file before go-live. BAA available on healthcare-vertical contracts. Redlines accepted. Standard term: 12 months, auto-renewing annually with 60 days opt-out.
Talk to sales
Tell us about your use case and we'll reply within one business day. You'll hear back from a real person, not a drip sequence.