The platform Fortune 100
platform teams have shipped.
Self-hosted control plane in your VPC, customer-managed keys, a dedicated Firecracker pool, a named TAM on your bridge in under an hour — for engineering organisations measured in thousands, not seats.
This page is the operator memory: what the enterprise plan actually includes, the four deployment topologies we ship, the three commercial shapes negotiable inside it, and the procurement paths — HPE, Big4, regional SIs, cloud marketplaces — that route the deal through your buying desk on its own paper.
Six things you actually
negotiate for.
Not feature flags, not credits, not seat counts dressed up. Six commitments your platform org can write into the contract — and verify, in production, on day one. The enterprise plan is what these six lines describe and nothing less.
Self-hosted control plane
BYOC Helm chart on Kubernetes 1.29+. Tenant-sharded NestJS, Postgres, NATS — runs inside your VPC, behind your IdP, on your nodes. The control plane never reaches outside the perimeter you draw.
SCIM 2.0 + SAML
SCIM 2.0 with custom attributes for Okta, Entra ID, Google Workspace, Ping, JumpCloud. SAML 2.0 with both SP-initiated and IdP-initiated flows. Just-in-time provisioning, group-based RBAC, conditional access.
Customer-managed KMS
Per-tenant KEK in your AWS KMS, GCP KMS, Azure Key Vault, or HashiCorp Vault — never ours. exAI holds only wrapped DEKs. Pull the KEK and the tenant goes opaque in 30 seconds. 90-day rotation default.
Dedicated Firecracker pool
A reserved fleet of microVM hosts on dedicated bare-metal — no neighbours, no oversubscription. Capacity-planned to your peak concurrency, scaled by your platform team, monitored on the same dashboards.
Named TAM · 1h P1
A named technical account manager paired to your platform team. Quarterly business reviews, an executive sponsor, a 24×7 SRE rotation, and a contractual 1-hour P1 response. Bridge-line, not a ticket queue.
Custom agents + private models
Bring your own LLMs — Anthropic, OpenAI, Vertex, Bedrock, on-prem Llama, Qwen, Mistral. Author custom agents in the public TypeScript SDK and ship them through the same DAG runtime that runs the 26 native agents.
Pick the perimeter.
Same product. Same audit log.
Four shapes, one Helm chart. The control plane API is the same, the audit log schema is the same, the SRE rotation is the same — there are no second-class installations. You pick the perimeter your regulator and your network team can live with.
Multi-tenant SaaS
exAI-managed control plane and data plane. Fastest path to production, lowest operational overhead — the runtime your team uses on day one of the pilot.
- us-east-1 · us-west-2 · eu-west-1
- 99.99% uptime SLA · 1h P1 response
- Tenant-sharded · per-workspace microVM
Single-tenant cloud
Dedicated control plane and Firecracker fleet inside your AWS, GCP, or Azure account. exAI operates the runtime; you own the network, the keys, and the data plane.
- Your AWS · GCP · Azure account
- BYO-VPC · BYO-KMS · BYO-IdP
- Reserved bare-metal · no oversubscription
Hybrid · control SaaS, data BYOC
exAI hosts the control plane; the Firecracker data plane runs in your VPC. Tokens, audit logs, and workspace artefacts never leave your perimeter — the orchestration does.
- Control plane · exAI-hosted
- Data plane · your VPC · your keys
- PrivateLink · Private Service Connect · Private Link
Air-gapped on-prem
Full offline install. Helm chart on Kubernetes 1.29+, signed model bundles delivered on encrypted media, a one-binary update channel. No phone-home, no implicit egress, no exceptions.
- Kubernetes 1.29+ · Helm chart
- Signed model bundles · encrypted media
- airgap-verifier in CI · no phone-home
Three shapes.
Custom on every line.
No public list price for a 500-seat deployment — that number is yours, not ours, and it depends on commit length, support tier, regions in scope, model SLAs, custom agents, and the shape of the named-TAM engagement. Six dimensions, one conversation.
- ·50–100 seats · 14-day window
- ·Multi-tenant SaaS or BYOC pilot
- ·Up to 200 compute-hrs / seat
- ·All 26 agents · Orchestrator · Live Share
- ·Standard SLA · 8h P1 response
- ·Pilot success criteria · jointly authored
- ·Annual commit · seat + compute pool
- ·Single-tenant or hybrid topology
- ·Customer-managed KMS · SCIM 2.0 · SAML
- ·99.99% SLA · 1h P1 · named TAM
- ·BYO-LLM · BYO-agent SDK
- ·Quarterly business review · roadmap input
- ·Multi-year commit · ramped pricing
- ·Air-gapped on-prem available
- ·Dedicated Firecracker pool · bare-metal
- ·Custom SLA · 30-min P1 floor
- ·Private model deployments · BYO-cloud
- ·Co-engineering · roadmap co-authorship
Every enterprise contract is built from the same six dimensions. We open the spreadsheet, you bring the constraints, the TAM keeps the running ledger.
Routes through your buying
desk on its own paper.
Most regulated buyers cannot sign a direct contract with a young vendor — the procurement gate is what kills the deal, not the engineering review. We do not pretend that is our problem to solve unilaterally; we route through the partners already inside your buying desk.
Reseller-compatible margin is built into the price book — not bolted on at quote time. HPE earns hardware margin and GreenLake services revenue. Big4 and regional SIs earn delivery, change-management, and ongoing managed-service fees. Cloud marketplaces earn the platform listing fee and attribute spend to your committed cloud budget.
The result: a Fortune-100 buyer can route the entire deal through an existing master agreement, on existing paper, with an existing supplier code — no new vendor onboarding, no new tax indemnity dance, no new bank-account verification.
- No first-vendor onboarding cycle
- Spend on existing PO + supplier code
- Cloud commit-burndown via marketplace
- SI delivery wrapped into the same SOW
HPE
GPU-backed deployments, GreenLake consumption economics, and an OEM-grade reference architecture for private-cloud and air-gapped sites. Hardware on the same purchase order as software.
Deloitte · EY · KPMG · PwC
Co-delivery for Fortune-100 transformations: change management, ITSM cutover, audit attestations, controls mapping, and the executive sign-off that lands the program inside the steering committee.
Accenture · Capgemini · Wipro
Regional implementation muscle — Accenture, Capgemini, Wipro, TCS, Infosys, NTT Data — with tens of thousands of certified delivery engineers across EMEA, APAC, and Americas.
AWS · Azure · GCP
Listed on AWS Marketplace (Private Offer + EDP-burndown), Azure Marketplace, and Google Cloud Marketplace. Spend counts toward your committed cloud budget — not against it.
Bring it through your procurement
desk.
A 60-minute briefing with the platform engineering lead, the named TAM you would inherit, and a procurement architect who speaks PO numbers, supplier codes, and cloud-commit burndown. We will map the deal to the partner that already sits inside your buying desk — and leave you a one-page summary your CFO can countersign.