Enterprise-readiness is our biggest strength.
Security, audit, and compliance — all 87 governance capabilities enterprises actually need for AI adoption, built into a multi-AI workspace from day one.
Talk to us
Protected, without being watched.
Day to day, admins see only usage and cost. Conversations belong to the person and whoever they shared them with.
Our approach to security
Audit and Legal Hold — traceable when it matters.
Audit events are recorded, queryable via API, and exportable. Legal Hold, GDPR erasure, and long-term retention are available to discuss under Enterprise.
See audit logs
Keep company information from leaving.
A Security Filter that detects and masks sensitive data before sending, then restores it in the response, comes standard — available today alongside SSO, SCIM, and model governance.
See the feature
Enterprise-readiness is our headline feature.
Security, auditability, and legal compliance come standard, the reason teams choose Prompt Flow Studio as their AI workspace.
Protected, without being watched.
Rolling out AI to a team creates two jobs that pull in opposite directions. We make both work.
We don't watch, day to day
Conversations and generated artifacts belong to the author and whoever they're shared with. What admins see day to day is team usage and cost — PFC consumption and storage.
We can trace back when it matters
Every action is recorded as an audit event and queryable via API. CSV/JSONL export with SHA-256 checksums is planned for October 2026 and later.
Nothing leaves the workspace
Security Filter — detect and mask sensitive data before it's sent, then restore it in the response — comes standard (Team: detect & warn only, Business and above: auto-mask & restore). Contextual detection and mask-event audit review on Business+ and above are planned for October 2026 and later. Custom detection rules, bring-your-own detection dictionaries, and an org-wide enforced policy that people can't opt out of are available to discuss through the Enterprise program (rolling out from October 2026 onward).
Enterprise capability catalog
Business steps up to Business+ and on to Enterprise. Here we only cover the capabilities that make a real difference for organization-wide rollout. For the full common-feature comparison, see the pricing page.
Identity & access, and leak prevention
| 項目 | Business | Business+ | Enterprise |
|---|---|---|---|
| SAML SSO | Yes | Yes | Yes |
| SCIM auto-provisioning (create, update, deprovision) | — | Yes | Yes |
| Group-to-role auto-assignment | Yes | Yes | Yes |
| Break-glass emergency access (fully audited) | Yes | Yes | Yes |
| Signed webhook verification for integrations | Yes | Yes | Yes |
| Secret-variable masking | Yes | Yes | Yes |
| Security Filter (PII auto-mask & restore) | Yes | Yes | Yes |
| Contextual detection + mask-event audit view | — | Planned (from Oct 2026) | Planned (from Oct 2026) |
| Custom detection rules | — | — | By consultation (from Oct 2026) |
| Org-wide enforced policy (no individual opt-out) | — | — | By consultation (from Oct 2026) |
| Bring-your-own detection dictionary (BYO) | — | — | By consultation (from Oct 2026) |
Audit, data governance, cost control & infrastructure
| 項目 | Business | Business+ | Enterprise |
|---|---|---|---|
| Audit event log & query API | Yes | Yes | Yes |
| Audit export (CSV/JSONL with SHA-256 checksums) | — | Planned (from Oct 2026) | Planned (from Oct 2026) |
| Tamper-evident audit log (hash chain) | Yes | Yes | Yes |
| Draft-branch retention | Auto-cleaned after 30 days | Auto-cleaned after 30 days | Configurable retention policy; freeze with Legal Hold |
| Legal Hold (freeze data for litigation or investigation) | — | — | Yes |
| GDPR erasure | — | — | Yes |
| Audit-log retention period | 1 year | 1 year | 7 years (statutory retention, linked to Legal Hold) |
| Billing ledger integrity (enforced recording, daily reconciliation, real-cost reconciliation) | Yes | Yes | Yes |
| Team budgets & usage alerts | Yes | Yes | Yes |
| Model governance (org-controlled model availability) | Planned (from Oct 2026) | Planned (from Oct 2026) | Planned (from Oct 2026) |
| Data residency (choose the storage region) | — | — | Yes |
| CMEK (customer-managed encryption keys) | — | — | Yes |
| Dedicated shard | — | — | Yes |
| SLA (uptime guarantee) | — | — | Yes |
| Dedicated CSM | — | — | Yes |
| Invoice billing | — | — | Yes |
| Priority support | — | Yes | Yes |
Yes = available. — = not applicable. Planned / By consultation = scheduled to roll out from October 2026 onward. Business+ and Enterprise always include everything from the tier below.
Security Filter — by plan
Detects sensitive and personal data before it's sent. Automation and scope grow with the plan.
| 項目 | Team | Business | Business+ | Enterprise |
|---|---|---|---|---|
| Detect and warn | Yes | Yes | Yes | Yes |
| Secret-variable masking | — | Yes | Yes | Yes |
| Auto-mask and restore | — | Yes | Yes | Yes |
| Contextual detection + mask-event audit view | — | — | Planned (from Oct 2026) | Planned (from Oct 2026) |
| Custom detection rules, BYO dictionaries & org-wide enforcement | — | — | — | By consultation (from Oct 2026) |
Legal & compliance
From audit trails to long-term retention, we answer what legal and compliance teams ask for.
Audit event log & query API
Every action — who, when, what — is recorded and available via a query API. CSV/JSONL export with SHA-256 checksums is planned for October 2026 and later.
Legal Hold, GDPR erasure & retention
Tamper-evident audit logs (hash chain) come standard on Business and above. Data freezes for litigation or investigation (Legal Hold), GDPR erasure, and 7-year audit retention (statutory retention, linked to Legal Hold) are available on Enterprise.
What's included in Business plans
- Team sharing
Share threads and personas across the team.
- SAML SSO
Single sign-on with your IdP (Business and above).
- SCIM
Automated user provisioning (Business+ and above).
- Audit query API
Query audit events via API. CSV/JSONL export with SHA-256 checksums is planned for October 2026 and later.
- Team usage
See this month's PFC consumption and cost for your team.
Individual ⊂ Team ⊂ Business. Every tier includes everything below it.
Individual
- 4 modes (Chat/Compare/Debate/Workflow (Beta))
- Transparent PFC & balance guard
- Knowledge, artifacts, mobile
Team
- Everything in Individual
- Share, review, branch & adopt
- Team usage reporting
Business
- Everything in Team
- SSO & audit log
- Security Filter built in
Business plans include everything in Team. See the team page for collaboration details.
Pricing — Team & Business
Prices are per seat. Minimum seat counts apply.
| 項目 | Team | Business | Business+ | Enterprise |
|---|---|---|---|---|
| Monthly (per seat) | $60 | $95 | $150 | Custom quote |
| Annual (per month) | $50 | $79 | $125 | Seats + PFC usage |
| Minimum seats | 5 | 10 | 25 | Custom |
| Monthly PFC (per seat) | 4,000 | 4,500 | 5,000 | Usage-based |
| Storage | 15GB | 25GB | 40GB | Custom |
How onboarding works
Contact us
Tell us what you need and roughly how many people will use it.
Scope the requirements
We work out whether you need SSO, how many seats, and your target start date.
Start using it
We issue accounts and your team gets started.
Questions from business customers
SAML SSO is available on Business and above. SCIM is available on Business+ and above.
Related pages
Learn more:
- Team plans (share, review, branch & adopt)
- Enterprise (data residency, CMEK, SLA — by consultation)
- Our approach to security
- SSO & SCIM details
- Audit logs details
- Full pricing
Ready to talk? Reach us through the contact form.
From teams that use AI, to teams that run on AI.
Start with one piece of work you're already doing.
Start free