Simple by design.
Early access is limited to a small set of firms. No minimum spend. One DPA covers everything — every model, every feed, every tier.
The full ephemeral runtime for pilots and evaluation builds — same zero-retention defaults from day one.
- Ephemeral execution
- Zero retention by default
- Static egress
- OpenAI-compatible API
- Private & open models
Production inference over privileged matter data. No minimum spend, no vendor-by-vendor audits.
- Everything in Developer
- No training on your data
- Graduated isolation classes
- One DPA
- Audit log & usage export
Firm-wide deployment with dedicated infrastructure, security-review support, and custom egress.
- Everything in Firm
- Dedicated gateway
- Security-review support
- Customer-managed keys
- Custom egress IPs
Security is not a pricing tier.
The controls procurement and IT care about hold across every tier. No plan gates the security posture.
Zero retention by default
Prompts, responses, and documents are not written to durable storage in the paths Privileged controls.
No training on your data
Customer data is never used to train, fine-tune, or evaluate any model — by contract and construction.
Static, controlled egress
Traffic exits through a fixed infrastructure identity your firewall can whitelist. Deny by default.
Encryption
TLS 1.3 in transit; encryption at rest with customer-managed keys available for stored data.
One DPA
A single agreement, signed in days — not five vendor negotiations across months.
Tenant isolation
Org/project scoping, row-level security, and single-tenant runtimes with graduated isolation classes.
No certification is claimed. Privileged builds toward SOC 2 / ISO 27001 readiness; ask for the current security posture.