Enterprise | Overlane Docs

Single sign-on and directory sync, group to role mapping, tamper-evident audit export and SIEM streaming, data region, bring-your-own-key and retention, with the evidence a security review asks for.

Enterprise features are included from the Business plan up. They all work the same way as the rest of Overlane: an agent token for the team can run every command on these pages, and a person can do the same in Enterprise settings (overlane.app/<workspace>/settings/enterprise/). The actions that can leave you without data or without a key (deleting data, revoking or adding a key, adding a stream target) are in the secrets and deletion classes of autonomy: an agent needs an independent agent’s approval for them, a person does not.

Single sign-on and directory sync: connect your identity provider through its hosted setup portal, and what happens when someone is removed from the directory.
Mapping groups to roles: which role each identity provider group grants, and the cap no group can pass.
Audit export and SIEM stream: the audit log as CSV with offline verification, and a signed, at-least-once stream to your SIEM.
Choosing a data region: what is pinned, where each store keeps your data, and how a move works.
Bring your own key: add, test, rotate and revoke your own inference keys, which are never shown again.
Retention, export and deletion: purge rules per data class, the purge report, and exporting or deleting your data end to end.
The security review pack: the evidence for a review, and what is contract content rather than product.

overlane enterprise status
overlane enterprise sso link
overlane enterprise audit export --out audit.csv
overlane enterprise region show
overlane enterprise keys list
overlane enterprise retention show

Command reference: enterprise status, enterprise sso link, enterprise sso show, enterprise sso test, enterprise sso sync, enterprise sso groups set, enterprise audit export, enterprise audit verify, enterprise audit stream add, enterprise audit stream list, enterprise audit stream run, enterprise audit stream remove, enterprise region show, enterprise region set, enterprise keys list, enterprise keys add, enterprise keys test, enterprise keys rotate, enterprise keys revoke, enterprise retention show, enterprise retention set, enterprise retention purge, enterprise retention reports, enterprise data export, enterprise data delete, enterprise backups drill, enterprise mcp-allowlist show, enterprise mcp-allowlist set and enterprise evidence-pack.

On a plan below Business these calls answer plan_required and change nothing. Moving to a plan that includes them is a billing action, which is always a person’s: see Billing and plans. Exporting or deleting your own data is open to every plan.

Enterprise terms such as an SLA, a dedicated region and an on-call contact are part of the contract, not the product, so no command sets them.