Enterprise overview

The Enterprise tier is for organizations that need centralized identity, governed access, audit trails, and direct database connectivity. Everything in Pro, plus:

Single sign-on

SAML 2.0 and OIDC for Okta, Entra ID, Google Workspace, OneLogin, JumpCloud, Auth0, Ping, and custom IdPs — all configured via the WorkOS Admin Portal.

Directory Sync

SCIM-based auto-provisioning and deprovisioning. Users created when added to an IdP group, removed when they leave.

MFA

TOTP at sign-in through WorkOS for password users. SSO users rely on your IdP’s MFA.

Audit logs

An append-only record of every share change, plus application logs and an organization-wide CloudTrail trail.

Compliance

HIPAA (with BAA available), GDPR and CCPA.

Database connectors

Direct PostgreSQL, MySQL, Snowflake, Azure SQL and Delta Sharing. Plus Fivetran for other sources.

Rollout sequence

A typical Enterprise rollout is four steps. Items can run in parallel — most customers are fully live in 1-2 weeks.

Provision the organization

Sales creates an organization for your domain. You’ll receive an invitation email naming a designated admin user. Domains are sales-provisioned (not self-claim) to prevent squatting.

Verify your domain and set up SSO

From Settings → Organization, click Configure under Domain Verification and Single Sign-On. Both buttons open the WorkOS Admin Portal — Summand’s identity layer is built on WorkOS, so SSO setup runs there rather than in a Summand-side wizard. See the SSO guides for IdP-specific steps.

Configure org-wide policies

From Settings → Organization, configure:

SSO (required for SSO-eligible domains) and Directory Sync for SCIM
Member roles and seat counts

To require MFA for password sign-ins, ask your account manager. Intelligible sets it in WorkOS.

Onboard your team

Users sign in with their company email. Summand detects the verified domain, redirects to your IdP, and JIT-provisions the user on first sign-in. Pair this with Directory Sync so users are also auto-deprovisioned when removed from the IdP.

Roles and permissions

Enterprise organizations have four roles, managed from Settings → Organization → Members:

Role	What they can do
Owner	Everything an admin can do, plus billing.
Admin	Manage organization settings, SSO, Directory Sync and members.
Member	Create and edit connectors, datasets and views, share, and run analysis. Standard user.
Chat	Use Summand chat only. No access to connectors or datasets in the data plane.

Organization roles don’t grant access to other people’s datasets. Access to each dataset comes from sharing and workspace membership.

Support

Enterprise customers get:

Email support — 4-hour response SLA for production issues
Dedicated CSM — single point of contact for onboarding, training, and roadmap input
99.9% uptime SLA — credited per the contract
Priority feature requests — direct line to the product team

Reach support at support@intelligible.ai or via the in-product chat.