ENTERPRISE
Enterprise-Grade Identity & Data Infrastructure
SAML/OIDC SSO, SCIM directory sync, org-wide MFA enforcement, and an agent-native data warehouse — deployed in your VPC with tamper-proof audit trails.
IDENTITY & ACCESS
Enterprise Identity, Built In
SSO, directory sync, and MFA enforcement — so your security team says yes on day one.
SAML / OIDC SSO
Connect your identity provider — Okta, Azure AD, Google Workspace, or any SAML 2.0 / OIDC-compliant IdP. One-click login for every team member.
SCIM Directory Sync
Automate user provisioning and de-provisioning from your identity provider. Group-to-role mapping keeps permissions in sync.
MFA Enforcement
Require multi-factor authentication org-wide. Supports TOTP authenticator apps and WebAuthn hardware keys via WorkOS AuthKit.
Powered by WorkOS AuthKit
Enterprise identity built on WorkOS — the same auth layer used by Vercel, Perplexity, and Descript. Social login (Google, GitHub) and magic links included on all tiers.
COMPLIANCE & GOVERNANCE
Built for Regulated Environments
Tamper-proof reasoning traces, immutable audit logs, and encryption you control — designed for industries where compliance is non-negotiable.
SOC 2 Type II Readiness
Architecture designed from day one for SOC 2 Type II compliance. Immutable audit trails, encryption at rest, and access controls baked in.
Immutable Audit Logs
Every query, mutation, and agent action is recorded in a tamper-evident, cryptographically hash-chained log. 7-year retention on Enterprise.
Role-Based Access Control
Custom roles with fine-grained permissions. Column masking, row-level security, and per-agent resource quotas.
CMEK Encryption
Bring your own encryption keys via AWS KMS, GCP Cloud KMS, or Azure Key Vault. You control the keys — we never see your data.
DEPLOYMENT
Your Cloud, Your Rules
Deploy HatiData in your VPC with private connectivity and regional data residency.
In-VPC Deployment
HatiData runs inside your cloud account. Your data never leaves your network — AWS, GCP, and Azure supported.
Shadow Mode
Run HatiData alongside your existing warehouse with zero risk. Compare query results side-by-side before switching.
Data Residency
Deploy in the region of your choice. Private connectivity via AWS PrivateLink, GCP Private Service Connect, or Azure Private Link.
GET IN TOUCH
Talk to Our Enterprise Team
Tell us about your requirements — SSO, compliance, VPC deployment, or custom integrations.