Enterprise

Open-source LLMs your security team can sign off on.

SOC 2 Type II via Decart AI. GDPR-compliant by design. Single-tenant deployment, contractual SLAs, zero retention by default — the compliance paperwork your procurement team actually asks for.

Compliance, declared honestly

SOC 2 Type II certified through Decart AI's audited control environment. GDPR-compliant by design with EU data residency on enterprise clusters. HIPAA BAA in active rollout — talk to us if a healthcare deployment is gated on it.

Single-tenant by default

Enterprise plans deploy on dedicated GPU / Trainium clusters. No noisy-neighbor effects on P99. Optional VPC peering for zero public-egress traffic.

Zero retention. Audit logs you control

Prompts and completions are not retained, not used for training, full stop. Sanitized request logs stream to your SIEM. Per-key, per-route, per-action.

P99 SLAs in your contract

We commit to 99.99% availability and contractual P99 latency targets. We share the dashboard. We pay credits when we miss.

Compliance status

Live status. We update this page the day a control changes.

as of today
SOC 2 Type II
Certified
Cogito inherits SOC 2 Type II certification from Decart AI's audited control environment. Reports available under NDA.
GDPR
Compliant
GDPR-compliant by design. Zero retention by default; DSR (data subject request) tooling included; EU-region clusters available on enterprise contracts.
HIPAA BAA
In progress
HIPAA BAA in active rollout. Targeted availability H2 2026; reach out if a healthcare deployment is gated on the BAA and we'll prioritize.

Talk to engineering.

Tell us what you're building, what your compliance bar is, and what models you want to run. We'll come back with concrete numbers and a deployment plan within two business days.

Or email cogito@decart.ai.