Enterprise edition
Your people are already using AI. Enterprise makes it governed, attributable and private — without taking it away from them. Everything in Standard, plus total control of AI across the organisation.
"What are we spending on AI?" — Every request priced and attributed to a person, per tenant.
"What are people sending to these tools?" — Out-of-policy requests refused before they reach any model.
"Can I stop it if I need to?" — Budgets, permitted use and models, set centrally and enforced at the server.
What Enterprise adds
Everything in the Standard edition, plus the layer that makes AI safe to hand an entire organisation.
Your models, on your infrastructure. Run everything locally and no prompt, document or record value ever leaves your building — and even on a hosted model, prompt text is never stored.
The control plane for every AI user in your organisation. The company sets the model, the budget and the permitted use — enforced at the server, where an app cannot argue with it.
Your ERP holds the records. Your documents hold the context. Enterprise makes both answerable in a single question — and never passes off half an answer as a whole one.
Not one assistant with a job title. A signed, branded desktop colleague built for each function — HR, sales, finance, operations — each carrying the skills, tools and playbooks of its trade.
Every person — and every AI acting for them — sees exactly what their role allows. Not filtered in the interface: enforced at the server, and at your ERP's own permission layer.
The details
A one-way hash, the request length and the response length — no column holds the text. Prompts are not indexed and not embedded. If your own content policy blocks a request, the text is kept for your administrator to review, then erased after 30 days; the record that it was blocked, by which rule, is kept.
Optionally, everything local: your models via Ollama or any endpoint you control, and document embeddings served by a local model so text never leaves your deployment. We treat the embedding route as a contractual setting, not an operational one — because repointing it would silently change the answer.
The identity hub proves who is calling; the bridge maps that identity to a credential it already holds. Someone with no Odoo login registered is refused by name, before Odoo is ever contacted — and the shared service credential is unreachable either way. One honest cost: an administrator registers each person's Odoo login once.
Three layers, and they compose:
One honest note: the ERP and platform layers are verified end to end; document-level permissions are built and we'll configure and prove them on your tenant before you rely on them.
The AI step halts and the person sees: "Your organisation's AI budget for this period has been used up… your administrator can raise the limit." No error codes. The admin sees exactly which team spent it.
The platform behaves byte-for-byte like the Standard edition. That's the acceptance criterion, and proving it is itself a test case. Upgrading — and downgrading — is a decision, not a migration.
No penetration test or compliance certification (SOC 2, ISO) has been performed yet. Claims about what is stored are verifiable from the schema and made above; claims about what is secure we don't make. We'll hand your security tester the code — and show you the enforcement points that exist today.
Every plan includes
No obligation, no card, no lock-in. And what comes with your plan isn't a discount — it's what it takes to make an ERP actually land.
Not months. Your implementation is underway in your first week.
A full year included with every plan — not a paid add-on.
We come to you and train your team in the room, on your data.
A hundred hours of our engineering, built into every plan.
◆ No card to start · ◆ No obligation · ◆ Cancel any time in the three months · ◆ Your data stays yours
Questions
A governance assessment walks your own tenant through model control, budget stops and per-person identity — live, on your terms.
Thirty minutes, your paperwork, your questions. We will show you what it does — and, just as importantly, what it refuses to do.
