Solutions · Enterprise
Security meets simplicity.
One workspace for departments that today run on six, with SSO, permission groups, EU data residency and AI governance that says who may do what, with which model, for how much. A contract, an SLA and a success manager on the Enterprise plan.
Audit log10:14 · Sanne shared Board pack with Leadership (view)10:09 · Model call · assistant · Project report · €0.0409:58 · SSO login · jonas@northwind.nl · Azure AD
What usually goes wrong
Change managementEvery tool change is a migration project. Teams keep the old one in a tab for a year.
Security and complianceSix vendors means six DPAs, six audit trails and six AI policies, most of them unread.
Scale and performanceWorkspaces of hundreds of people need permissions that mirror the org, not a flat member list.
StakeholdersCFO · Head of Product · 2 leadsCheck-in every Friday; escalation after 2 misses.
Access
Permissions that mirror the organisation.
Teams, permission groups and content-level sharing (view, comment, edit, admin, highest wins). Organization spaces for what everyone should see. SSO over SAML. Guest access for clients and accountants is coming soon.
- SSO (SAML), Azure AD, Google Workspace
- Permission groups per teamspace and per content
- Audit log of sharing, logins and model calls (coming soon)
AI governance
Agents with budgets, approvals and an audit.
One AI pool per team with daily token, action and spend limits. Model tiers per workspace. Feature toggles for coding agents, external messaging and publishing. An approvals inbox and a record of every model call with its cost.
- Autonomy matrix per agent: read, draft, send, modify, spend
- Simulate mode before anything runs
- Per-action undo and a 7-day ramp-up for new agents
AI pool · Finance team · today€14.20 of €40 · 212 of 600 actions
Feature togglesCoding agentsOn · ApproveExternal messagingOn · Approve firstPublic publishingOff
RegionsEU (Frankfurt, Amsterdam)Cloudflare + Supabase
ChatEnd-to-end encryptedclient-side search
CertificationsSOC 2: in progress.
Residency and encryption
EU-hosted, encrypted where it matters.
Cloudflare and Supabase EU regions. End-to-end encrypted chat with keys that stay in your workspace. Export and erasure built into Recruitment and the CRM. Certifications stated only when they are verified.
- Data residency options on the Enterprise plan
- SOC 2: in progress.
- Security page and trust centre at trust.thekairos.app
Questions
Is there an SLA?+
Yes, on the Enterprise plan, with a dedicated success manager and invoicing.
Can we bring our own model keys?+
Model tiers are configured per workspace; talk to sales about provider agreements and residency for model traffic.
Consolidate the stack without a migration year.
Invite the team, import what you have, and turn on only the modules you need.