For Enterprise customers who can't share infrastructure with anyone - regulated industries, government contractors, or buyers whose security team won't approve a multi-tenant SaaS. We run a dedicated Pocodot instance for you, with the controls below.
What's dedicated
- Own database. Your data lives in a database that is yours alone. No table is shared with any other customer.
- Own application server. Cole runs in an instance dedicated to your workspace. Resource exhaustion or downtime in another customer's instance cannot affect yours.
- Regional residency. Pick the United States, Europe (Frankfurt), or Asia-Pacific (Singapore). Your data stays in the region you pick.
- Bring-your-own-key (BYOK). Wrap your workspace data-encryption key with your own KMS (AWS, GCP, or Azure). Revoking the key in your KMS makes your workspace immediately unreadable, even to us.
Identity and access
- SAML 2.0 SSO with Okta, Microsoft Entra ID, Google Workspace, OneLogin, and any other SAML 2.0 identity provider.
- SCIM 2.0 user provisioning - create, update, and deprovision teammates from your IdP automatically.
- Required two-factor authentication - enforce TOTP or WebAuthn for every sign-in.
- IP allowlist - restrict workspace access to your corporate network ranges.
Compliance posture
- HIPAA Business Associate Agreement available; required for any healthcare-PHI use case.
- Custom Data Processing Agreement - we will negotiate the DPA your procurement requires; we don't insist on our template.
- Sub-processor approval - Enterprise customers can require explicit written approval before any new sub-processor is added to their workspace.
- Custom audit-log retention - set the window your compliance program requires.
- Pre-filled CAIQ and SIG-Lite available in our trust portal on request.
Service levels
- 99.95% uptime SLA with credits tied to the contract.
- 1-business-day security questionnaire turnaround.
- Named technical account manager for the duration of the contract.
- Quarterly security review with our engineering team.
What stays the same
Every protection on the multi-tenant plan still applies: workspace isolation, encrypted logins and tokens, official logins for integrations, no human reads your messages as part of normal work, your data trains nothing, and real deletion when you leave. Dedicated adds isolation and customisation; it does not replace the baseline.
How to get it
Email security@pocodot.ai with your company name, the controls you need, and the timeline you're working to. We will reply within one business day with pricing and a proposed contract structure.