Enterprise
For knowledge that isalso evidence
Larger organizations get sign-in through their own identity provider, people added and removed by their directory, approvals before anything is published, and an audit trail and legal hold that compliance can rely on.
priced per person, by contractfrom 50 people, volume pricing agreed1 TB of storage
[ 01 ] Sign-in and people
Your identity provider, your directory
Single sign-on (SAML or OIDC)
Single sign-on through your own identity provider over SAML or OIDC (for example Okta, Microsoft Entra ID or Google Workspace). Your company's email domains, proven by a DNS record, sign in through it. An organization admin sets it up once for every Varynt product, in Organization settings › Security; each domain is proven with a DNS TXT record, and public mail providers are refused.
SCIM provisioning
Your identity provider adds, switches off and removes people and syncs groups, for every Varynt product at once. People are matched by email, so somebody already in your organization is linked, not duplicated. A person it adds gets no access until a group or an admin gives it, and synced groups stay read-only in Varynt, though you can give them roles. Only addresses on your verified domains can be provisioned.
Never locked in
Switching single sign-on off never needs the plan, so a change of plan cannot trap a workspace with a provider it can no longer remove.
Sessions and two-step sign-in
Sign-out after 30 idle minutes and a 10-hour longest session, set by Varynt sign-in; an authenticator app per person.
IP allow-list
Restrict the workspace to your networks; every Varynt product refuses a request from outside it. A list that leaves out your own address is refused, so you cannot lock yourself out.
[ 02 ] Compliance
Controls a compliance team asks for
- 01
Publish approvals
A space can require an approver; approving publishes exactly what was submitted, and every step is audited.
- 02
Audit log and retention
Filter every admin and security action, export it as CSV, and keep it from 90 days to 7 years (2 years by default).
- 03
Legal hold
Preserve a space or the whole workspace: nothing in it can be purged or deleted for good until the hold is released, and a downgrade never releases it.
- 04
Watermarking
Stamp the reader's name, email and time across the pages they view and into Word and Markdown downloads.
[ 03 ] Everything in Premium
And the governance underneath it
Restricted spaces and pages
Named people and groups only, workspace admins included.
Owners, reviews, verification
Every page answerable to someone, and checked by a date.
Read acknowledgements
Who has confirmed the policy, against the version.
Page analytics
Distinct readers per page and space, kept 400 days.
Confluence import
A whole space from its HTML export, previewed first.
Notify everyone
An important change to the whole company, by email and in the app.
[ 04 ] Onboarding
Set up with you, step by step
- 01
Scope
Your spaces, who should read what, and what you are moving from, on a call with the product team.
- 02
Workspace
Plan, first owner, single sign-on and SCIM with your identity team.
- 03
Import
Your Confluence spaces or Markdown files, previewed and imported as drafts.
- 04
Go live
Restrict what must be restricted, give key pages owners, and send the first read requests with us on hand.
[ 05 ] Questions
Procurement, briefly
How do we buy?
Can we see the terms first?
Do you hold a certification?
Not available yet
- Real-time co-editing: Not part of it today. You see who else is editing, and nobody's save silently overwrites another's.
- AI writing and AI answers: Not part of it today. If it ships, it will be priced separately from the subscription plans.