For Enterprise customers who can't share infrastructure with anyone - regulated industries, government contractors, or buyers whose security team won't approve a multi-tenant SaaS. We run a dedicated Pocodot instance for you, with the controls below.
What's dedicated
- Own database. Your data lives in a database that is yours alone. No table is shared with any other customer.
- Own application server. Cole runs in an instance dedicated to your workspace. Resource exhaustion or downtime in another customer's instance cannot affect yours.
- Regional residency. Pick the United States, Europe (Frankfurt), or Asia-Pacific (Singapore). Your data stays in the region you pick.
- Bring-your-own-key (BYOK). Wrap your workspace data-encryption key with your own KMS (AWS, GCP, or Azure). Revoking the key in your KMS makes your workspace immediately unreadable, even to us.
Identity and access
- SAML 2.0 SSO with Okta, Microsoft Entra ID, Google Workspace, OneLogin, and any other SAML 2.0 identity provider.
- SCIM 2.0 user provisioning - create, update, and deprovision teammates from your IdP automatically.
- Required two-factor authentication - enforce TOTP or WebAuthn for every sign-in.
- IP allowlist - restrict workspace access to your corporate network ranges.
Compliance posture
- HIPAA Business Associate Agreement available; required for any healthcare-PHI use case.
- Custom Data Processing Agreement - we will negotiate the DPA your procurement requires; we don't insist on our template.
- Sub-processor approval - Enterprise customers can require explicit written approval before any new sub-processor is added to their workspace.
- Custom audit-log retention - set the window your compliance program requires.
- Pre-filled CAIQ and SIG-Lite available in our trust portal on request.
Service levels
- 99.95% uptime SLA with credits tied to the contract.
- 1-business-day security questionnaire turnaround.
- Named technical account manager for the duration of the contract.
- Quarterly security review with our engineering team.
What stays the same
Every protection on the multi-tenant plan still applies: per-workspace encryption, OAuth-only integrations, no human reads your messages as part of normal work, your data trains nothing, and the signed deletion certificate when you leave. Dedicated adds isolation and customisation; it does not replace the baseline.
How to get it
Email security@pocodot.ai with your company name, the controls you need, and the timeline you're working to. We will reply within one business day with pricing and a proposed contract structure.