NEWPublication of @aurabase/js v0.5.1 NPM Packages, Rust Crate v0.1.1 & EcosystemSee the changelog →

Enterprise

Production-grade, compliance-ready.

Dedicated cluster, signed 99.99% SLA, SAML/SCIM SSO, BYOK, dedicated success manager and per-country data residency. Built for teams with zero tolerance for downtime.

Talk to salesTrust Center
99.99%
signed SLA, 20× credits
15 min
support response, 24/7
2 yrs
audit log retention

What changes

Eight core differences from the Pro tier.

Dedicated · single-tenant

Dedicated clusters

Isolated physical infrastructure. No noisy neighbors, reserved compute and memory, seamless capacity upgrades.

SLA · 99.99% · 4.3 min per month

Signed 99.99% SLA

Enforceable contract. Compensatory credits of 20× monthly fees upon any outage.

SAML 2.0 · SCIM 2.0

SAML SSO and SCIM

Okta, Azure AD, Google Workspace, Keycloak, Auth0. Automated user provisioning and deprovisioning.

Trust Center

Compliance roadmap

Sector-tailored DPA available today. Full published roadmap for SOC 2, ISO 27001, HIPAA BAA and PCI DSS on our Trust Center. None engaged yet.

Country-level · audited

Country-level data residency

Strict pinning: your data, backups and CDN caches never leave your selected country.

Slack · 15 min · 24/7

Dedicated success manager

Lead systems engineer, quarterly architecture reviews, dedicated Slack support with 15-minute response times.

AWS KMS · GCP KMS · HSM

Bring your own key

Envelope encryption with the KMS master key of your choice. Instant cryptographic revocation.

White-glove · no cost

Deployment support

Our solutions architecture team supports you: schema reviews, RLS audits, migration plans and load tests.

Security architecture

Defense in depth, down to the network.

In transit

Encrypted connections

Enforced TLS 1.3 · HSTS preload · Certificate pinning available · PrivateLink

At rest

Envelope encryption

AES-256 envelope · BYOK KMS · 90-day rotation · HSM compliant

Identity

Centralized access

SAML 2.0 and SCIM · Enforced MFA · Session binding

Audit

Traceability

2-year audit logs · SIEM webhook · 90-day PITR · Access reviews

Network

Perimeter protection

Integrated WAF · Tenant rate-limiting · IP allowlist · L7 DDoS protection

Trust Center

Our current compliance status.

No third-party certifications (SOC 2, ISO 27001, PCI DSS…) are currently in progress. The GDPR DPA is available and customizable by industry today. Our complete compliance roadmap is shared directly with your teams upon request, under NDA if needed.

  • SOC 2 Type II

    No third-party audit in progress to date

    Not yet engaged

  • ISO 27001

    No certification engaged to date

    Not yet engaged

  • GDPR · DPA

    Data Processing Agreement available, customizable by sector

    Available

  • HIPAA BAA

    No standard Business Associate Agreement to date

    Not yet engaged

  • PCI DSS SAQ-D

    No attestation in progress to date

    Not yet engaged

  • FedRAMP Moderate

    No audit planned to date

    Not yet engaged

  • SecNumCloud

    No ANSSI qualification in progress to date

    Not yet engaged

  • C5 (Germany)

    No BSI qualification in progress to date

    Not yet engaged

Enterprise rollout

Three weeks from signature to production.

  1. 1

    Kick-off call

    30 min with your designated architect. Review of needs, volume, compliance and schedule.

  2. 2

    Signed contract, cluster provisioned

    Shared Service Agreement, signed DPA, dedicated cluster operational in your preferred region.

  3. 3

    Assisted migration, load test

    Schema import, RLS policy generation, full-scale load testing on your typical traffic.

  4. 4

    Security review

    Internal pentest, Trust Center review and sign-off by your security team, with a full report.

  5. 5

    Guided go-live

    Production cutover with our team in a dedicated Slack channel. 72h active monitoring, bridge call if needed.

For procurement and legal

Everything your buying team asks for, in one place.

Contract

Tailored master agreement

A master services agreement and order form adapted to your legal team, with your own termination, liability and confidentiality terms.

Security review

Answers for your security team

We complete your security questionnaire, share our architecture documents and sub-processor list, and join a call with your reviewers.

Billing

Annual contracts and invoicing

Annual commitments, payment by invoice or purchase order, and one consolidated invoice for all your projects.

Evaluation

Proof of concept

Test your real workload before you commit, with success criteria agreed with your team and an architect at your side.

Relationship

Named account team

A named solutions architect and success manager, regular business reviews and early access to the roadmap under NDA.

Adoption

Onboarding and training

Workshops for your developers and administrators, migration playbooks and a shared channel with our engineers.

FAQ

Frequently asked questions.

How does Enterprise onboarding work?+
Kick-off call (30 min), then a Shared Service Agreement signed within 5 business days. Your dedicated cluster is provisioned within 48h, your success manager organizes an architectural review, and we run full-scale load testing matching your production load. Go-live happens in 2 to 3 weeks depending on your data volume.
What is the data deletion policy?+
Upon your request or contract termination, data is deleted within 30 days (default) or immediately (optional). A full pg_dump export is provided prior to deletion. A signed certificate of destruction is available upon request.
Do you support AWS PrivateLink or Azure Private Link?+
Yes. Private connectivity via AWS PrivateLink, Azure Private Link and Google Private Service Connect. No data traverses the public internet. Cross-account IAM for AWS, native service connections for Azure and GCP.
How does Bring Your Own Key work?+
We use an envelope encryption architecture. Your data is encrypted with a Data Encryption Key (DEK), which is encrypted with your Key Encryption Key (KEK) inside your KMS. Revoking the KEK immediately renders all data unreadable, even to our team.
Can we deploy Aurabase in our own VPC?+
Yes. The Enterprise plan includes managed deployment inside your own Virtual Private Cloud on AWS, GCP or Azure. This maintains complete control over your network, IAM policies and strictest compliance requirements.
What are the Enterprise prices?+
Priced according to your workload, compliance requirements and selected region. Annual contracts starting from €24,000 per year (dedicated cluster and standard support). SCIM SSO and BYOK are listed add-ons; the sector-tailored GDPR DPA is included. Contact us for a quote within 48h.
How is critical incident escalation handled?+
Severity 1 (production down): Slack notification and PagerDuty, a senior engineer engaged within 15 minutes, and a live bridge call until resolution. A public post-mortem follows within 5 business days, with an action plan for your team. Our incident policy is public in our compliance center.
Who are your Enterprise customers?+
Aurabase is in early-stage development, with no reference Enterprise customers to date. Contact us to discuss your specific architecture and use case directly.
Can we run a proof of concept first?+
Yes. We agree success criteria with your team, run your real workload on a dedicated environment, and review the results together before you sign.
Which contract and payment terms do you offer?+
Annual contracts with payment by invoice or purchase order. We adapt the master agreement to your legal requirements and can consolidate several projects and teams in one contract.

Let’s talk

An architect responds within 48 hours.

Brief us in 15 minutes: volume, compliance, timeline. Receive a tailored quote and a detailed onboarding plan.