--- title: "Enterprise — one governed API platform for every team · Elva" description: "Run Elva across every team: unlimited workspaces, SSO/SAML/SCIM, approval workflows, an exportable audit trail, and private-cloud or on-prem deployment." canonical: "https://getelva.ai/enterprise" lastModified: "2026-09-01T23:11:23.016Z" --- Enterprise # Thousands of services, one system of record Run Elva across every team, in your own cloud, with SSO, approval workflows, and an audit trail your auditors will actually accept. The same platform Ticketmaster, FIS and Fortune 500 teams already run on Theneo. [Talk to sales](mailto:hello@getelva.ai) [Read the security page](https://getelva.ai/security.md) 20,000 COMPANIES ON THENEO 99.9% UPTIME SLA Unlimited WORKSPACES AND MEMBERS On-prem OR YOUR PRIVATE CLOUD 01 Rollout ## Every team, without a migration project Connect repos service by service. Each team keeps its own workspace, contracts, and policies, while platform gets one view across all of them and a single place to set the rules. Unlimited workspaces One per business unit or product line, with inherited defaults so nobody re-invents your governance rules. Central policy, local autonomy Platform sets what must be true. Teams pick how strict to be above that floor, and see the diff. Fleet view across services One catalog spanning hundreds of repos, deduplicated, with an owner attached to every endpoint. 02 Control ## Approvals, roles, and an audit trail Breaking changes route to the people who own the consequence. Every proposal, approval, and publish is recorded with who, what, when, and which policy applied, exportable to your systems. Audit trail exportable · custom retention TIME ACTOR ACTION POLICY RESULT 14:22:08 n.k@acme.com Proposed removing "buildLog" from DELETE /builds/{id} payouts-partner · block pending 14:31:44 platform-lead@acme.com Approved breaking change, bumped contract to v1.5 partner · approval required approved 14:31:49 elva-system Regenerated spec, docs, SDKs, Postman collection, MCP server contract deploy published 14:31:52 elva-system Notified 4 stakeholders and 1 partner integration notify on publish sent 15:04:11 j.doe@acme.com Attempted publish of orders-public with 2 failing contract tests public · block-publish blocked 15:19:02 security@acme.com Revoked key elva\_test\_...44b0 after scope escalation attempt key lifecycle revoked SSO, SAML and SCIM Your IdP owns who can publish and approve. Deprovisioning a person removes their access everywhere, immediately. Role-based permissions Separate who can read the catalog, edit a contract, approve a breaking change, and revoke a key. Approval workflows Route by audience: partner and agent contracts need a named approver, internal ones do not. 03 Deployment ## Your cloud, your perimeter, your residency Run Elva as hosted SaaS, in a private cloud in your account, or fully on-prem. MCP servers can run inside your VPC on a custom domain, with logs staying in your own storage. Hosted SaaS Fastest path. Managed upgrades, 99.9% SLA, regional data residency options. Private cloud Deployed into your account. Your VPC, your KMS keys, your network policy, our upgrades. On-prem Air-gapped installs for regulated environments. Same contracts, same gateway, no egress. 04 Support ## A named engineer, not a ticket queue Enterprise plans include a dedicated engineer who knows your architecture, a security review with your team, a signed DPA, and a migration plan for the repos that matter first. Dedicated engineer One person who knows your services, your policies, and your rollout order. 99.9% SLA Written uptime commitment on the gateway, with status transparency and incident review. Security review and DPA We come to your review, answer the questionnaire, and sign the paperwork. Guided rollout We map your first ten services with you, then hand the pattern to your teams. ## FAQ ### Can Elva run in our own environment? Yes. Enterprise runs in a private cloud or on-prem, including self-hosted MCP servers and a custom domain such as mcp.yourcompany.com. ### Does Elva support SSO and SCIM? Enterprise includes SSO/SAML and SCIM provisioning, along with audit logs and an exportable contract audit trail. ### What does Enterprise support include? A 99.9% SLA, a security review, a DPA, and a dedicated engineer. RELATED READING [ MCP Aug 30 · 9 min Tools to build governed MCP servers for agents, compared Read → ](https://getelva.ai/blog/governed-mcp-servers-for-enterprise-agents.md)[ Governance Aug 29 · 8 min How teams actually control what AI agents can access Read → ](https://getelva.ai/blog/agent-permissions-and-data-access-governance.md)[ MCP Jul 14 · 8 min MCP servers are infrastructure. Run them like it. Read → ](https://getelva.ai/blog/mcp-servers-are-infrastructure.md) ## Bring Elva to the whole organization A short call, a security review, and a plan that fits your perimeter. [Talk to sales](mailto:hello@getelva.ai) [See plans](https://getelva.ai/pricing.md)