EP Enterprise provides the full trust-control plane deployed within your infrastructure. Every feature available in EP Cloud, plus the controls required by regulated environments.
VPC / private deployment
EP runs entirely within your infrastructure boundary. No trust data, policy configurations, or signoff records leave your network. Reference AWS CloudFormation template ships in infrastructure/aws/.
SSO — SAML 2.0 + OIDC
Approvers and admins authenticate through your IdP (Okta, Entra ID, Ping, Google). SAML Service Provider and OIDC Relying Party are built in; signature validation uses vetted libraries, never custom crypto. A successful login mints a signed EP session; the IdP client secret is sealed at rest (AES-256-GCM). Your live IdP tenant is connected during onboarding.
SCIM 2.0 provisioning
Provision — and deprovision — the named humans who can sign off, directly from your directory (RFC 7643/7644: Users, Groups, deactivation, filtering). A provisioned human becomes eligible to enroll a signing passkey; offboarding in your IdP revokes their signing credentials in the same sync.
Air-gapped deployment
A self-contained offline installer: build the bundle on a connected machine, transfer one tarball, install with no network. The running stack has no route off the host — enforced by the network driver, not configuration discipline. The full run on your isolated hardware is validated during onboarding.
Data residency
All trust data, event records, and policy configurations reside in your chosen jurisdiction. Meet data sovereignty requirements without architectural compromise.
Evidence retention & legal hold
Receipts are durable, offline-verifiable evidence by construction. Formal retention policies and legal-hold workflows are scoped per engagement (roadmap); today: full event search and audit-report export.
Regulator artifact exports
Generate structured evidence packages for regulatory examination, mapped to control families used in SOX and sector-specific frameworks (full FISMA / PCI-DSS mapping is roadmap).
Investigation tooling
Query and reconstruct action sequences across time, principals, and trust surfaces via the events API and audit reports. A dedicated forensic investigation mode is engagement-scoped (roadmap).
Delegated administration
Hierarchical administration with scoped permissions. Delegate policy management, signoff configuration, and evidence access to business units without granting global control.