The controls a regulated organisation runs on.
Single sign-on and role-based access, full audit and compliance exports, retention and legal hold, and live system health — the governance a DACH enterprise needs, on your own infrastructure.
Secure by default — governed at scale.
Secure by default
2FA, session management with revoke, login notifications, system-health monitoring and a basic 30-day audit log.
SSO & RBAC
SAML/OIDC single sign-on and role-based access across organisation, teams and users.
Full audit & exports
Unlimited retention, severity and filters, compliance exports.
Retention & legal hold
Policy-driven data retention and legal hold for regulated workflows.
Every control documented for due diligence · read the Trust Center →
Full audit, exports, retention and legal hold.
Every action logged with event type, user, project, action and severity, filterable and exportable for compliance review — with policy-driven retention and legal hold. A basic 30-day log ships in the Community Edition.
See the whole system at a glance.
Live health for the API Gateway, PostgreSQL, Redis and the vector store — uptime and heartbeat. 2FA, session management with revoke, and login notifications keep accounts safe in every edition.
“We exist to raise our customers’ potential. RAGSuite lets us do that with AI they actually own — on our brand, on their infrastructure.”
Compliance you can demonstrate, line by line — not something you outsource.
Administration & security, answered
What security is in the free edition?
2FA, session management (with revoke and login notifications), system-health monitoring and a basic 30-day audit log — all Community Edition.
Do you support SSO?
Yes — SAML/OIDC single sign-on, with RBAC across organisation, teams and users, in the Enterprise Edition.
How detailed is the audit log?
Event type, user, project, action and severity (low/medium/high), with filters. Full audit (unlimited retention + exports) is Enterprise; a basic 30-day log is Community.
Can we enforce retention?
Policy-driven retention and legal hold are available in the Enterprise Edition.
Lock down access, prove every action.
SSO, RBAC, retention and a full audit log. We’ll map RAGSuite’s controls to your security policy.