Skip to content

Open first · Enterprise adds

Enterprise adds depth. Open stays complete.

Community is the complete, free AGPL-3.0 platform with unlimited users and one active identity provider. Business includes the commercial license, signed release channel and four paid capability families. Enterprise adds negotiated contract terms.

Ground truth for enterprise AI.

Evaluate Enterprise See pricing

Business or Enterprise

Pick the line that matches your organization

Business includes the commercial license, signed release channel and four capability families: Regulated Operations, AI Runtime Security, Compliance Packs, Identity & Scale. Nothing is sold separately. For more legal entities, deployments or identity providers, air-gap, custom LTS, OEM/MSP or support objectives, contact us about Enterprise.

Business is enough when

US$99.00/month

or US$990.00/year — pay for ten months, get twelve
per subscription, not per user · plus applicable taxes

  • Your policy needs a commercial licence instead of the AGPL-3.0 obligations.
  • One legal entity; 1 active instance at a time; up to 5 active identity providers.
  • Business includes the commercial license, signed release channel and four capability families: Regulated Operations, AI Runtime Security, Compliance Packs, Identity & Scale. Nothing is sold separately.
  • Business-hours email support, best effort, fits how your team operates.
See Business pricing

You need Enterprise when

  • Procurement needs a DPA, capped indemnity or contract terms of its own.
  • You need several legal entities, more than 1 active instance at a time or more than 5 active identity providers.
  • You need LTS, air-gap and OTA update mirrors, or custom scoped credential exchange.
  • You redistribute Olivares as an OEM or an MSP.
  • You want scoped dedicated engineering and first-response objectives on email support.
Talk to us about Enterprise

The negotiated line

What an Enterprise order form adds

Enterprise is contracted work, not a hidden box of modules. It is agreed by email and signed as an annual order form.

  • 01

    Contract and procurement

    Capped indemnity, a DPA and procurement paperwork, plus OEM, MSP and redistribution rights where you need them.

  • 02

    Scale beyond self-serve

    You need several legal entities, more than 1 active instance at a time or more than 5 active identity providers.

  • 03

    Operations you control

    LTS, air-gap and OTA update mirrors for the control plane, and custom scoped credential exchange.

  • 04

    Engineering and support

    Scoped dedicated engineering such as policy authoring, tuning and bespoke connectors, with best-effort first-response objectives by email.

The open-core line

Three promises that define the edition boundary

These are structural product commitments, not contractual service promises.

  1. 01

    Community capabilities stay in Community.

    Community is the complete, free AGPL-3.0 platform with unlimited users and one active identity provider. Business includes the commercial license, signed release channel and four paid capability families. Enterprise adds negotiated contract terms.

  2. 02

    The AGPL core has no artificial performance or size limits.

    There are no throttles, synthetic delays or hidden feature flags in the open binary, and no user cap: users are unlimited on every edition.

  3. 03

    The criterion is published.

    Business includes the commercial license, signed release channel and four capability families: Regulated Operations, AI Runtime Security, Compliance Packs, Identity & Scale. Nothing is sold separately.

Additive capability

What each paid edition adds, by theme

Business includes the commercial license, signed release channel and four capability families: Regulated Operations, AI Runtime Security, Compliance Packs, Identity & Scale. Nothing is sold separately.

How we count: 32 modules are wired into the open server and 150 integrations ship in the public repository. Business adds 26 compliance framework catalogs.

Identity & access

Session cockpit with live console terminals, input and resume; LDAP/AD directories; several identity providers; groups and role mapping; agent groups; departments and nesting; durable delivery over your own NATS.

Content & data security

Community includes inline guardrails and egress DLP. Business: AI Runtime Security adds inspection and response on top of those checks. Configured content firewall, hook firewall, server-tool egress, elicitation mediation, computer-use declaration checks, render inspection, circuit breaker and CAEP transmission; retrieval scanning is linked with the family. Circuit-breaker rules and CAEP receivers must be configured. Presets, docs and diagnosis are supported; bespoke tuning, custom policy authoring and incident response are not.

Threat & incident

Business: Reporting, onboarding, threat intelligence, tool pinning, NIS 2 incident support and a post-quantum posture check. Regulated Operations: Regulatory retention floors with a compliance lock; privileged-action recording with notice and consent; S3 Object Lock, Azure and GCS WORM archives; legal-hold reconciliation, erasure depth and incident close-loop. These extend Community records.

Compliance & regulatory

Compliance catalogs, OSCAL export and DORA ICT-risk view. Compliance depth, DORA register, ISO/IEC 42001 and OSCAL ingest. It generates drafts and registers — your counsel or auditor reviews them. It is not a compliance service and it certifies nothing.

Operations & resilience

Community: Signed audit ledger and backup/restore. Business: Customer-managed keys (CMEK), durable event delivery over your own NATS JetStream and a deployment readiness check. Regulated Operations: Regulatory retention floors with a compliance lock; privileged-action recording with notice and consent; S3 Object Lock, Azure and GCS WORM archives; legal-hold reconciliation, erasure depth and incident close-loop. These extend Community records. Enterprise: Air-gapped installation and offline update bundles.

Integration

Community: API, SDKs and open connectors. Business: Audit export, SIEM push and observability export.

Enterprise only

Enterprise is a contract, not a bigger box of modules. It is agreed by email and signed on an order form — deliberately, there is no checkout and no automated funnel. Everything Community and Business include is already included here. Air-gapped installation and offline update bundles; LTS and OTA update mirrors; several legal entities; more than one active instance at a time; more than five active identity providers.

Business · FinOps

Business: FinOps budgets with alert, throttle or block policies, and spend analysis across teams and projects.

Curated comparison

Six flagship differences

Business includes the commercial license, signed release channel and four capability families: Regulated Operations, AI Runtime Security, Compliance Packs, Identity & Scale. Nothing is sold separately. For more legal entities, deployments or identity providers, air-gap, custom LTS, OEM/MSP or support objectives, contact us about Enterprise.

Capability Community (AGPL) Paid edition that sells it
Identity & access Complete single-IdP OIDC and SAML. Session cockpit with live console terminals, input and resume; LDAP/AD directories; several identity providers; groups and role mapping; agent groups; departments and nesting; durable delivery over your own NATS.
Content & data Core text DLP with a deny-closed posture when content is not scanned. AI Runtime Security capability family (requires Business): content firewall for injection, exfiltration and unsafe actions across message, retrieval and MCP-render channels.
Threat & incident Kill switch, guardian findings and tier-floor enforcement. Business: Reporting, onboarding, threat intelligence, tool pinning, NIS 2 incident support and a post-quantum posture check. Regulated Operations: Regulatory retention floors with a compliance lock; privileged-action recording with notice and consent; S3 Object Lock, Azure and GCS WORM archives; legal-hold reconciliation, erasure depth and incident close-loop. These extend Community records.
Compliance Signed audit ledger and backup/restore. Compliance catalogs, OSCAL export and DORA ICT-risk view. Compliance depth, DORA register, ISO/IEC 42001 and OSCAL ingest. It generates drafts and registers — your counsel or auditor reviews them. It is not a compliance service and it certifies nothing.
Operations & resilience Signed audit ledger and backup/restore. Regulatory retention floors with a compliance lock; privileged-action recording with notice and consent; S3 Object Lock, Azure and GCS WORM archives; legal-hold reconciliation, erasure depth and incident close-loop. These extend Community records.
Integration API, SDKs and open connectors. Business: Audit export, SIEM push and observability export.

A Community capability stays in Community; the paid editions add separate code for scale and risk depth.

Business: Unlimited users. One legal entity; 1 active instance at a time; up to 5 active identity providers.

License validation is attestation-only. The open binary never reads a license to enable, disable or block a capability.

Community: Inbound SCIM 2.0 server.

Download the full capability matrix

Open-first by design

What you do not need Enterprise for

The full platform for one person or one team, AGPL-3.0, self-hosted.

  • Signed audit ledger and backup/restore.
  • Inline guardrails and DLP on egress
  • Retention schedules
  • Use governed Claude Code workflows and render managed settings locally or make signed settings available for authenticated retrieval. Host application and fleet rollout require separate verification.
  • Inbound SCIM 2.0 server
  • Basic sessions for official tools: launch, watch, interrupt from the CLI, stop
  • Complete single-IdP OIDC and SAML.
  • Your own model-provider keys
  • Restorable export of your data
  • Signed public releases with SBOM and provenance

Procurement facts

Read this before evaluating

The useful enterprise conversation starts with the boundaries as they are today.

Release stage
The next release is 1.0, the first stable release of Community and Business/Enterprise. It is not yet released. Capabilities and their current limits are documented separately. Docs
Compliance
Readiness and posture, not certified status. Evidence and report automation do not certify the organization or guarantee compliance.
Air-gapped
Air-gapped applies to the control plane, not Claude inference. Hosted Claude still reaches its provider API; only self-hostable models can run fully offline.
Support
No edition carries a contractual SLA. Enterprise support is a best-effort first-response objective from a single maintainer: no penalty, no credit, no remedy and no 24×7 coverage. Community is community support and Business is business-hours email, both best-effort.
FIPS
FIPS is an optional build using CMVP module #5247, not an Olivares-level certification.

Evaluation

How an Enterprise evaluation works

  1. 01

    Prove it on the open build

    Run Community on your own infrastructure. The proof-of-value guide sets pass/fail criteria against the real binary over 10 business days.

  2. 02

    Send us the scope

    Write to enterprise@olivares.ai with your legal entities, production deployments, identity providers and the requirement you need to test.

  3. 03

    Agree the order form

    Scope and terms are agreed by email and signed as an annual order form. No checkout or portal is part of this path.

Enterprise evaluation questions

Does Enterprise remove anything from Community?

No: no edition moves a Community feature to a paid edition, caps it or time-limits it. Some capabilities that early releases shipped in the public build moved to Business before that rule took effect, as docs/editions.md lists. Community is the full platform for one person or one team; Business and Enterprise add what companies need, under a commercial license.

Does the open edition limit how many people can use it?

No. Community has unlimited users, no instance or legal-entity limit, and 1 active OIDC or SAML identity provider.

Does Compliance Packs certify our organization?

No. They automate evidence gathering, readiness material and report structure. Certification or a compliance determination comes from the relevant accredited body or authority.

Can the whole deployment run offline?

The self-hosted control plane can run air-gapped. Hosted inference such as Claude still requires its provider API; only a self-hostable model can run fully offline.

Evaluate the additive value against your requirements

Write to enterprise@olivares.ai with the scale, regulatory or risk requirement you need to test. No checkout or portal is part of this evaluation path.

enterprise@olivares.ai Evaluate with the 10-day proof-of-value