---
title: "Enterprise"
description: "Single sign-on and directory sync, group to role mapping, tamper-evident audit export and SIEM streaming, data region, bring-your-own-key and retention, with the evidence a security review asks for."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.overlane.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Enterprise

Enterprise features are included from the Business plan up. They all work the same way as the rest of Overlane: an agent token for the team can run every command on these pages, and a person can do the same in Enterprise settings (`overlane.app/<workspace>/settings/enterprise/`). The actions that can leave you without data or without a key (deleting data, revoking or adding a key, adding a stream target) are in the secrets and deletion classes of [autonomy](/autonomy/): an agent needs an independent agent's approval for them, a person does not.

- [Single sign-on and directory sync](/enterprise/sso-and-scim/): connect your identity provider through its hosted setup portal, and what happens when someone is removed from the directory.
- [Mapping groups to roles](/enterprise/group-roles/): which role each identity provider group grants, and the cap no group can pass.
- [Audit export and SIEM stream](/enterprise/audit-and-siem/): the audit log as CSV with offline verification, and a signed, at-least-once stream to your SIEM.
- [Choosing a data region](/enterprise/data-region/): what is pinned, where each store keeps your data, and how a move works.
- [Bring your own key](/enterprise/byok/): add, test, rotate and revoke your own inference keys, which are never shown again.
- [Retention, export and deletion](/enterprise/retention-and-deletion/): purge rules per data class, the purge report, and exporting or deleting your data end to end.
- [The security review pack](/enterprise/security-review-pack/): the evidence for a review, and what is contract content rather than product.

```sh
overlane enterprise status
overlane enterprise sso link
overlane enterprise audit export --out audit.csv
overlane enterprise region show
overlane enterprise keys list
overlane enterprise retention show
```

Command reference: [enterprise status](/cli/enterprise-status/), [enterprise sso link](/cli/enterprise-sso-link/), [enterprise sso show](/cli/enterprise-sso-show/), [enterprise sso test](/cli/enterprise-sso-test/), [enterprise sso sync](/cli/enterprise-sso-sync/), [enterprise sso groups set](/cli/enterprise-sso-groups-set/), [enterprise audit export](/cli/enterprise-audit-export/), [enterprise audit verify](/cli/enterprise-audit-verify/), [enterprise audit stream add](/cli/enterprise-audit-stream-add/), [enterprise audit stream list](/cli/enterprise-audit-stream-list/), [enterprise audit stream run](/cli/enterprise-audit-stream-run/), [enterprise audit stream remove](/cli/enterprise-audit-stream-remove/), [enterprise region show](/cli/enterprise-region-show/), [enterprise region set](/cli/enterprise-region-set/), [enterprise keys list](/cli/enterprise-keys-list/), [enterprise keys add](/cli/enterprise-keys-add/), [enterprise keys test](/cli/enterprise-keys-test/), [enterprise keys rotate](/cli/enterprise-keys-rotate/), [enterprise keys revoke](/cli/enterprise-keys-revoke/), [enterprise retention show](/cli/enterprise-retention-show/), [enterprise retention set](/cli/enterprise-retention-set/), [enterprise retention purge](/cli/enterprise-retention-purge/), [enterprise retention reports](/cli/enterprise-retention-reports/), [enterprise data export](/cli/enterprise-data-export/), [enterprise data delete](/cli/enterprise-data-delete/), [enterprise backups drill](/cli/enterprise-backups-drill/), [enterprise mcp-allowlist show](/cli/enterprise-mcp-allowlist-show/), [enterprise mcp-allowlist set](/cli/enterprise-mcp-allowlist-set/) and [enterprise evidence-pack](/cli/enterprise-evidence-pack/).

On a plan below Business these calls answer `plan_required` and change nothing. Moving to a plan that includes them is a billing action, which is always a person's: see [Billing and plans](/billing/). Exporting or deleting your own data is open to every plan.

Enterprise terms such as an SLA, a dedicated region and an on-call contact are part of the contract, not the product, so no command sets them.

Source: https://docs.overlane.app/enterprise/index.mdx