Pricing · Private Enterprise AI, Governance & Memory
Private, verifiable enterprise AI. Priced for how you deploy.
Zero data retention, tamper-evident compliance logging and continuous governance across every department, tool and workflow. Run it in your own cloud or on-premise, or let our engineers operate a dedicated single-tenant AWS environment for you.
Enterprise compliance posture
Continuous assurance across application, data and cloud.
Dedicated environment isolation, strong encryption and real-time in-app compliance monitoring on AWS's certified cloud backbone — mapped to the frameworks your auditors ask about.
ISO/IEC 27001
Information Security Management
Application security controls & cloud hosting
ISO/IEC 42001
AI Management System
Governance, safety and accountability for AI
ISO/IEC 27701
Privacy Information Management
PII masking, GDPR / CCPA alignment
SOC 1 · SOC 2 Type II · SOC 3
Audit readiness
Exportable evidence for independent auditors
HIPAA / HITECH
Health data readiness
BAA support and PHI isolation
FedRAMP High
Cloud backbone
Sovereign, defense-grade compute and storage
NIST AI RMF 1.0
AI risk management
Source attribution and output auditing
Controls are designed to align with these frameworks. Certification scope, current audit reports and AWS attestations are shared under NDA via the Trust Center.
01 · Choose your deployment posture
Four ways to deploy. One complete platform.
Every option includes the full platform below — no artificial feature gating.
Option 01
Proof-of-Value Pilot
Fast-track security & performance validation
$4,500
One-time · 100% credited toward your first year
For executive teams, CISOs and procurement committees that need proof of security, accuracy and adoption before an annual contract.
- Deployed in your VPC or our isolated environment
- Up to 50 users with assigned roles, 5 departments
- 5 connectors, 5 AI agents, 5 workflows, 10 knowledge repositories
- Full hybrid search with agent-driven execution
- Pre-flight InfoSec architecture sign-off & vendor assessment support
- Full Trust Center access and audit exports
Option 02
Customer-Hosted
Your AWS, Azure, GCP or on-premise cloud
$8,500/yr
Early-adopter rate · Standard list $12,500 / year
For IT, security and DevOps teams with strict data residency policies and existing cloud commitments.
- Runs 100% inside your sovereign cloud boundary
- Unlimited users and workspaces — no per-seat fees
- Unlimited departments with independent permissions
- Unlimited native and custom connectors
- Bring your own model / key: Bedrock, Azure OpenAI, Anthropic, OpenAI or private open-source
- Docker, Kubernetes Helm and Terraform deployment blueprints
- Upgrades, security patches and connector updates included
Option 03
Managed Dedicated Cloud
Single-tenant AWS, operated by Workplace Memory
$1,900/mo
Or $22,900 / year billed annually
For organizations that want total isolation, enterprise SSO and governance with zero internal DevOps.
- Your own private AWS VPC — no shared databases, no multi-tenant risk
- Isolated vector database, dedicated KMS keys, encrypted document storage
- Private model routing via AWS PrivateLink with contractual zero data retention
- Provisioning, scaling, patching and 24/7 monitoring handled for you
- Daily encrypted snapshots with point-in-time recovery testing
- Hosted on your subdomain, e.g. ai.yourcompany.com
- 99.9% uptime SLA with direct engineering escalation
- Ongoing operations and monthly compliance reports included
Option 04
Air-Gapped & Defense Grade
Sovereign, bare-metal, fully offline
$29,500
One-time license · $5,900 / year maintenance from year 2
For defense contractors, government agencies, financial institutions and air-gapped corporate environments.
- Zero external calls, telemetry or outbound traffic
- Runs on your on-premise NVIDIA GPU servers with open-weight models
- Bare-metal and private Kubernetes offline installers
- Physical infrastructure and network validation dossier
02 · Included on every tier
The complete enterprise platform.
Security, governance and access control are the product — not add-ons.
[A]
Hybrid search & reasoning
- Semantic vectors fused with exact keyword search — clauses, figures and specs found without misses
- Every answer cites document, page, paragraph and confidence score
- Answers withheld when sources fall below the confidence threshold
- Ingests PDFs, Office files, spreadsheets, scanned records (OCR) and nested folders
[B]
Unlimited connectors
- Google Drive, Microsoft 365, Slack, Notion, Jira, Confluence, GitHub, Linear, Salesforce, HubSpot, Box, Zendesk
- No-code custom connectors for PostgreSQL, MySQL, private REST APIs and webhooks
- Separate read and write scopes per connector, least privilege by default
- Source permissions mirrored so nobody sees what they couldn't open at the source
[C]
Governance & access control
- Unlimited departmental silos with isolated knowledge boundaries
- SAML 2.0 / OIDC single sign-on and SCIM provisioning — Okta, Entra ID, Google Workspace
- Automatic deprovisioning: access revoked the moment an employee leaves
- Multi-superadmin dual custody guards against lockouts and rogue policy changes
[D]
Risk, privacy & compliance
- In-flight PII redaction of SSNs, card, bank, password and contact data before any model call
- Tamper-evident audit vault with cryptographic hash-chaining
- Real-time SIEM streaming to Splunk, Datadog or your SOC
- In-app Trust Center tracking 12 controls, with SIG Lite and SOC package export
- Retention schedules, legal hold and verified right-to-erasure deletion
[E]
Security systems
- AES-256 encryption at rest, TLS 1.3 in transit, customer-managed keys (BYOK)
- Enforced MFA, session timeouts, IP allow-lists and device posture rules
- Prompt-injection and data-exfiltration guards on every agent tool call
- Rate limiting, anomaly alerts and break-glass emergency access with full logging
- Zero-egress network policies and private endpoints
[F]
Agents & governed workflows
- Departmental agents with custom instructions, scoped knowledge and limited tools
- Trigger → Retrieve → Analyze → Approve → Write back → Audit
- Brand voice, templates and approved terminology built into every output
- Kill switch to pause any agent or workflow instantly
Role-based access control
Six roles. Least privilege by default. Enforced on every request.
Roles sync from your identity provider and combine with department boundaries and document-level permissions. Checks run on the server before retrieval — the AI never sees what the user is not allowed to see.
Superadmin
Tenant policy, key rotation, identity settings. Dual-custody required for critical changes.
Compliance Officer / DPO
Read the audit vault, configure PII rules, place legal holds. Cannot read restricted content.
Department Admin
Manage agents, connectors and workflows inside their own department only.
Approver
Sign off Tier 2 and Tier 3 actions within their delegated authority and spend limits.
Contributor
Upload and curate knowledge, run approved agents. No policy or permission rights.
Employee / Auditor
Ask questions and verify sources within permitted knowledge. Read-only.
Tier 1
Low riskSelf-service lookups and queries run automatically.
Tier 2
Medium riskSupervisor or department manager sign-off required.
Tier 3
High riskExecutive two-person sign-off before external records change or critical workflows run.
03 · Onboarding & implementation
Self-serve ready. White-glove if you want it.
Your team can upload documents, activate connectors, assign roles and deploy agents in minutes. These packages are optional.
Customer-hosted only
Self-Deployment
$0
- Step-by-step setup guides
- Docker Compose, Helm charts and Terraform
- Full independence for your engineers
One-time
Fast-Track Assisted
$1,450
- Dedicated implementation engineer
- Cloud deployment, database and custom domain setup
- SSO setup: Okta, Entra ID, Google Workspace
- Up to 5 connectors synced and indexed
- Department permission structure
- Recorded admin & super-admin training
One-time
Enterprise Transformation
From $4,500
- Custom databases and legacy API integration
- High-volume migration and archive indexing (>100 GB)
- Custom department hierarchy and SSO group mapping
- Multi-agent workflows and Tier 3 approval pipelines
- Live SIEM / SOC integration and validation
- Vendor risk and procurement support
- Admin plus staff end-user adoption training
04 · Ongoing operations & governance
Continuous governance for self-hosted installs.
Managed Dedicated Cloud clients need none of these. Hosting, maintenance, zero-downtime upgrades, patching, 24/7 monitoring and monthly ISO & SOC compliance reports are already included in Option 03.
Essential Support
$490 / month
- Quarterly updates and vulnerability patching
- Connector health and API compatibility
- Database tuning and search index maintenance
- Monthly ISO & SOC compliance audit report
- Business-hours support · 8-hour SLA
Operational Co-Pilot
$1,250 / month
- Everything in Essential Support
- Continuous agent tuning and search accuracy optimization
- Up to 2 new connectors per month
- Priority engineering support · 4-hour SLA
- Executive risk & adoption review
Enterprise Dedicated Partner
$2,950 / month
- Everything in Operational Co-Pilot
- Named senior architect and account manager
- Shared Slack / Teams channel
- Custom agent and workflow development
- 24/7/365 incident response · 1-hour SLA
- Monthly report with CISO attestation
All prices in USD. Final terms, SLAs and security commitments are defined in your signed agreement.
Questions
What executives ask us first.
Your company already holds an extraordinary amount of intelligence. It's time to make it accessible.
Let's turn the knowledge, systems and workflows you already have into a private AI workforce built around the way the business actually runs.
No generic chatbot · No one-size-fits-all setup · A private environment for one company