Deliverd Enterprise
One record across your AI estate,
whatever models and tools you choose.
Enterprise extends Compliance Mode across business units, jurisdictions and agent estates. Deliverd stays neutral to the AI your organisation uses: agents call it over MCP and the API, and it keeps the objectives, the decisions, the controls and the evidence in one place.
Annual contracts from €25,000 a year, priced to what you govern
What Enterprise adds
What a larger organisation needs, and how it is met
| Need | Deliverd |
|---|---|
| Identity at scale | Single sign-on with SAML and OpenID Connect, Directory Sync from Microsoft Entra, Okta and other SCIM directories with groups mapped to teams and roles, workspaces, and seven roles from owner to viewer. |
| Regulatory coverage | Versioned framework packs for NIST AI Risk Management Framework, ISO/IEC 42001 AI management system, EU AI Act and UK AI regulatory principles, each mapping requirements to Deliverd's controls, with jurisdictions recorded on AI systems and frameworks. |
| Your own controls | Your organisation's own frameworks and controls, versioned like the built-in packs and held to the same evidence. |
| Governance over time | A material change — a new model, a newer policy or framework version — calls for reassessment. Work is held to the version it was assessed under, reviews fall due, and a serious unresolved incident blocks the governance gate. |
| Agent governance | Named agent identities, authority set for each kind of action — on its own, with a person, or not at all — under an organisation ceiling, and execution records checked against what was allowed. |
| Evidence and retention | Evidence packs with a sha256 digest, an audit log nothing can edit, legal holds that survive a downgrade, and retention and limits set by agreement. |
| Neutral to your AI | ChatGPT, Claude, Cursor, Codex, Copilot in VS Code and your own agents connect over MCP, the REST API, the SDKs or the CLI. Evidence exports as JSON, CSV or PDF to whatever register you already keep. |
| Support | Onboarding with the people who built it, and support and service levels written into your contract. |
A framework pack maps a framework's requirements onto Deliverd's common controls as a starting point for your own review. It is not legal advice and does not establish that any use complies with the framework. Whether a requirement applies, and whether the mapped controls meet it, is for your organisation to decide.
Start with one use case
The governed AI pilot
Thirty to forty-five days, one real AI use case, one business owner, one approval path and one evidence pack at the end. The work runs through Tasks, gates and Compliance Mode with the AI tools you already use, and finishes with a recommendation and an agreed production scope — not an open-ended trial.
- Week 1 — the objective, the AI systems, the data, the risk and the approval points.
- Week 2 — real work through Tasks and side tasks, with your tools connected.
- Week 3 — controls, evidence and gates switched on.
- Week 4 — the evidence pack, what it took, and the proposal for production.
Questions
Enterprise, plainly.
How is Enterprise priced?
Annually, from €25,000 a year, by the scope you govern: business units, jurisdictions, retention and support. The governed AI pilot is a fixed fee, credited against the first year if you sign within 30 days of it ending.
Do you hold SOC 2 or ISO 27001?
Not yet, and our security page says so. We answer security questionnaires against what is true, and a data processing agreement is available.
Where is our data held?
Stored in London and served from London. Every subprocessor is named, with what it does and where, on the security and trust page.
Can we keep our existing GRC platform?
Yes. Deliverd records the work and the decisions as they happen; evidence exports as JSON, CSV or PDF to whatever register you already keep.
Is a framework mapping legal advice?
No. A pack maps a framework's requirements onto our controls as a starting point for your own review. Whether a requirement applies, and whether the mapped controls meet it, is for your organisation to decide.
Start with one production use case.
Read how we handle security before you ask, then tell us what you want to govern first.