Enterprise
Deployment options for teams whose agents must run inside the company.
Rollout, data handling, approved providers, support scope.
Deployment
Your own relay server. Machines dial only the relay inside your network, and terminal traffic stays there. If you need it, the control plane and sign-in run inside as well. Either way the agent and the code stay on that machine.
What goes up
Up: machine list, session names, agent state, sealed notification bodies. Not up: prompts, transcripts, file contents. Notification bodies are sealed to the device's public key — not openable on the server. Terminal content passes between the machine and the client only.
Access
Accounts: connect your user pool (your IdP, over SAML or OIDC) and everyone it authorizes can use it. Devices: registration required, revocable from the account. Share links: expiry and scope. Approvals: pressed by a person on a phone.
Record
git: who, where, when. A worktree and a branch per task — nothing merges without review. Account record: device registration and removal, share links, plan changes.
Model providers
The agent talks to its provider from that machine. Nothing in between. Approved-provider list unchanged.
Not available
No SOC 2 report. Available: documentation of the architecture, and the option to run all of it yourself.
Price
Varies with size and deployment. By email.
support@sophonz.io