What the Scanara Enterprise plan includes
Enterprise is for organizations that need single sign-on, custom roles or limits set by contract. It is priced by contract. This page lists only what Scanara documents today.
What Enterprise includes, by area
- ✓Unlimited repositories and assessments
- ✓Scans, AI systems, team members and dossiers: limits set by contract
- ✓Unlimited audit-trail access and export
- ✓Scan history of 1,825 days (service description, section 5)
- ✓Scans of code (10+ programming languages) and documents (8 languages)
- ✓11 guided assessment types, including AIRA, FRIA and DPIA
- ✓Draft dossiers such as Annex IV technical documentation (PDF, DOCX, Markdown)
- ✓Merge gate on all repositories (GitHub Checks API)
- ✓Single sign-on through OIDC (Okta, Entra, Google Workspace, Auth0 or any OIDC provider); SAML is planned
- ✓Custom roles
- ✓Audit trail in write-once (WORM) storage, kept at least 10 years on every plan
- ✓99.9% availability target per calendar month (a target, not a guarantee)
- ✓2-hour response target for critical (P1) incidents during business hours
- ✓Data processing agreement under Article 28 GDPR, with individual amendments possible
- ✓Public sub-processor list
- ✓Transfer impact assessments on request
- ✓Vendor evaluation pack: security questionnaire, DPA template, architecture overview
- ✓None held today
- ✓ISO 27001 in preparation; SOC 2 and ISO/IEC 42001 planned; no dates published
- ✓External penetration test planned; no date published
Who Enterprise is for
Enterprise suits organizations with:
- •More AI systems or team members than the Business plan covers (50 each)
- •A single sign-on requirement (OIDC) or custom roles
- •Procurement requirements such as individual DPA amendments and a documented sub-processor list
- •A need for audit-trail access and export without a time limit
Procurement questions
What does Enterprise cost?
Enterprise is priced by contract, based on the number of AI systems, team members, scans and dossiers you need. Contact us for a quote.
Is there a data processing agreement (DPA)?
Yes. Scanara concludes a data processing agreement under Article 28 GDPR electronically with the terms of service, on every plan including Free. Enterprise customers can agree individual amendments.
Who are the sub-processors?
The published list is at /legal/sub-processors. Under the DPA, the sub-processors are Amazon Web Services EMEA SARL (cloud infrastructure and transactional email, processed in eu-west-1, with CloudFront edge locations in the EU and North America) and GitHub, Inc. (repository access for scans, on your instruction only, under Standard Contractual Clauses and the EU-US Data Privacy Framework). Stripe Payments Europe, Ltd. handles billing as an independent controller, not a sub-processor.
Where is data stored?
Customer data is stored in AWS eu-west-1 (Dublin, Ireland): scan results with short code excerpts, assessments, dossiers and audit records. Scanara does not keep a full copy of your repository. During a scan, files are read from GitHub (USA) into short-lived memory in eu-west-1. Frankfurt (eu-central-1) is the designated failover region; a full failover has not been tested yet.
What are the availability and support targets?
The Enterprise availability target is 99.9% per calendar month. The response target for critical (P1) incidents is 2 hours during business hours. Both are targets, not guarantees. If the availability target is missed by more than 1 percentage point, you can request a credit of up to 30% of the monthly fee within 30 days (service description, section 2).
Does Scanara hold security certifications?
No. Scanara holds no SOC 2 report and no ISO 27001 certificate today. ISO 27001 is in preparation; SOC 2 and ISO/IEC 42001 are planned. No dates are published. The certifications of AWS cover the AWS infrastructure only. An external penetration test is planned. The vendor evaluation pack contains the security questionnaire and the architecture overview.
Talk to us about Enterprise
Tell us how many AI systems, team members, scans and dossiers you need. We quote a price by contract.
Scanara prepares evidence from your repositories
Scanara reads your connected GitHub repositories and runs rule-based scans for standard AI and machine-learning patterns. It can miss non-standard code. Separately, it generates draft documentation from templates and your assessment answers as evidence for your compliance work. You make the classification decisions.