Business Enterprise
We verify the record. We never see the contents.
For organisations that need Double-Oh inside their own environment — including a private-tenant deployment Double-Oh cannot see into.
Custom — by inquiry
Three ways to deploy
Hosted (Mode H)
The standard platform under enterprise terms. Isolation is logical, as today — you're buying terms, not blindness.
Dedicated, content-blind (Mode D)
A single-tenant instance in your chosen region, with content encrypted under keys you hold. Delivered under agreement.
In your environment (Mode T)
The full stack runs in your own cloud or on-prem. No Double-Oh admin access, and you decide when any release reaches production. Delivered under agreement.
Dedicated and in-environment deployments are delivered under a signed agreement; they aren't self-serve.
How it works
Proof without visibility
Your audit ledger stays with you. Only content-free integrity signals — anchor fingerprints, chain checkpoints, version and counts — ever leave, so anyone you choose can confirm the record is unaltered.
Keys you hold
In private deployments, content is encrypted with keys in your own key service. Revoke our access and the data is unreadable to anyone outside your environment.
You gate every release
Updates arrive as signed packages. Pin a version, test it in staging, roll it to one team, or decline it — nothing changes until you promote it.
Support by evidence, not access
No standing access, no backdoor. Support works from a signed evidence pack you export, covering only what you choose.
What's included
- Everything in Business Growth, with agents, workflow capacity, credits and retention set by agreement
- Private Tenant option: hosted, dedicated, or inside your own environment
- Region pinning for data residency
- Single sign-on and directory integration for your admins and approvers
- Custom data-processing terms and retention
- Named support channel with agreed response times
Talk to us
Looking for self-serve plans? See pricing.