Enterprise

For organisations that need single sign-on, an audit trail or their own server.

Identity and access

Single sign-on, sign-in policy and custom roles for your organisation.

SAML and OIDC single sign-on, required for your verified email domains, with groups mapped to roles and a break-glass owner.
A sign-in policy: a second factor, session length, idle timeout, session limit, password length and an IP allowlist.
Custom roles made from a fixed list of permissions.

An audit log of every security-relevant and data-changing action, sent to your SIEM, kept as long as you choose.

Every route writes an audit entry or carries a written reason why not, and a test holds that.
Search the audit log and download it.
Send the audit log to syslog (RFC 5424), CEF, signed webhooks or S3-compatible storage, in order and with retries.
Owners set how long runs, monitor runs, history and the audit log are kept, within what the plan allows.
Export everything the organisation holds as one archive, or delete the organisation.
One console for members, groups, roles, single sign-on, policy, audit, SIEM, retention, billing and usage.

Run the Porticol server on your own infrastructure, for one organisation.

The same server as Porticol Cloud, run in team mode.
Licensed per installation with a signed licence file.
Encrypted backups on a schedule, each verified after it is written.
Every change to the server is tested by upgrading from the previous release and rolling back.

For a security review, start with the security page. For an Enterprise plan or a team server licence, contact us.