---
title: "Enterprise"
slug: "enterprise"
type: page
locale: en-US
canonical: "https://www.coremodels.io/enterprise"
updatedAt: "2026-09-25T09:13:11+02:00"
---

# Enterprise

Your scale, your controls.

|  |  |
| --- | --- |
| Price | $4,000+/mo |
| Card | Invoice |
| Seats | unlimited |
| Projects | unlimited |
| Nodes per model | unlimited |
| Includes | SSO · SLA · private vaults · security review · DPA · named contact |

- Unlimited projects, users and schema scale
- SSO · SLA · private vaults
- Security review and DPA
- A named contact

## Security Overview

Contracting entity: Ariesnet, Inc.

Written for a buyer’s security review. Where a line says “on request”, email [legal@aramai.net](mailto:legal@aramai.net).

**Credential-free import.** CoreModels imports the artifacts your tools already produce (for example dbt manifests, JSON Schema files, OpenAPI documents). It does not need your warehouse, database, or API credentials to build a model.

**Isolation.** Each customer’s projects are logically isolated. Enterprise plans can be deployed on dedicated infrastructure or in your private cloud.

**Encryption.** Data in transit is encrypted using TLS 1.2 or higher. All customer data is encrypted at rest using industry-standard encryption. Encryption keys are managed and rotated following best practices.

**Access control.** Role-based access on all plans (builder / view-only). Enterprise adds SSO/SAML, IP allow-listing, and audit logs.

**Agents and the MCP endpoint.** Agents authenticate with the same credentials as people and inherit the same project permissions. Each principal is limited to 15 concurrent in-flight requests; Enterprise throughput is set in contract.

**Access.** Production access is limited to named engineers, protected by MFA, and logged.

**Backups and retention.** Backups run daily. The retention window and the restore-test cadence are available on request.

**Certifications.** We do not hold SOC 2 or ISO 27001 certification.

**Security reviews.** We complete your security questionnaire (SIG Lite, CAIQ, or your own) within 10 business days. We do not have an external penetration test report. Enterprise contracts can include a right to audit on 30 days' notice.

**Vulnerability reporting.** [security@aramai.net](mailto:security@aramai.net) We acknowledge within 2 business days.

**Subprocessors and hosting region.** See the [Data Processing Addendum](/legal/dpa).

Questions: [legal@aramai.net](mailto:legal@aramai.net)

[Talk to us](https://www.aramai.net/contact/eyJleHRyYURhdGEiOiJjb3JlbW9kZWxzIiwicmVxdWVzdFNvdXJjZSI6ImNvcmVtb2RlbHMifQ==)