Enterprise
Verified intake, built for teams.
Shared workspaces with role-based access, verified records routed straight to your ATS/CRM, and HMAC-signed webhooks on Postgres row-level security. SSO, audit logs, and a custom SLA for Enterprise.
Row-level security
Every table has RLS enforced. Users only read their own workspace's data.
Encrypted at rest
AES-256 encryption for stored data. TLS 1.3 in transit.
Signed webhooks
HMAC-SHA256 signatures on every outbound webhook. Verify authenticity.
Enterprise features
What's shipped today and what's on the roadmap — no vapor.
Team workspaces & roles
Shared workspaces with role-based access — invite admins, editors, and viewers. Every workspace is isolated with row-level security. Available on the Business plan.
CRM & ATS routing
Push verified records into HubSpot and Pipedrive (beta — stable auth, a real provider round-trip is still pending), with Salesforce, Zoho, and recruiting ATS rolling out — reachable now via signed webhooks. Available on Max and above.
HMAC-signed webhooks
Every webhook payload is signed with HMAC-SHA256, with exponential-backoff retries and a full delivery log. Verify authenticity on your endpoint. Signed webhooks ship on every plan.
Postgres RLS + tenant isolation
Row-level security is enforced on every table. SECURITY DEFINER RPCs are the only public surface. Per-tenant isolation by default.
SSO (SAML / Google Workspace)
Single sign-on via SAML 2.0 and Google Workspace OAuth, with centralized user provisioning and de-provisioning. Planned for Enterprise.
Audit logs
Immutable logs of every form edit, submission access, and AI query, exportable to your SIEM. Planned for Enterprise.
Custom domains
Publish forms on your own domain — forms.yourcompany.com — with full SSL and white-label. On the roadmap; not available yet.
SOC 2 & security review
SOC 2 readiness documentation and a custom security review for Enterprise customers. In progress; our infrastructure providers (Vercel, Supabase) are already SOC 2 Type II compliant.
Plans for teams
Start on Max for routing, scale to Business for team collaboration, and move to Enterprise when you need SSO and an SLA. Flat monthly pricing — no per-seat charges.
Max
Operators who need verified records routed into their ATS/CRM.
- Everything in Pro
- 5,000 AI credits / mo
- CRM & ATS routing (HubSpot live; more rolling out)
- API access
- PayPal payment fields + e-signature fields
- Ask-your-data (conversational BI)
- Lost-lead / partial-submission recovery
Business
Teams that collaborate on intake across multiple workspaces.
- Everything in Max
- 25,000 AI credits / mo
- Team workspaces & role-based access
- Multiple workspaces
- Higher AI-action allowance
- Priority support
Enterprise
Organizations that need SSO, audit logs, and an SLA.
- Everything in Business
- SSO (SAML + Google Workspace) — Q3 2026
- Audit logs + SIEM export — Q3 2026
- Dedicated account manager
- Custom SLA (99.9% uptime)
- Security review + SOC 2 readiness docs
Need a security review or custom SLA?
We'll walk you through our SOC 2 readiness, data handling, and tenant isolation, and scope a custom SLA for Enterprise rollouts.
Typical response time: under 4 hours on business days.