Enterprise

For organisations with a process.

Expedition is the same product with higher limits and a contract. If you need something we have not built, we will say so — not promise it.

What Expedition is

More capacity, in writing.

Higher limits

Up to 50 projects, 1,000 active prompts and 50,000 collected answers a month by default — more on request, priced to your volume.

DPA and contract review

A standard DPA is published. We will review your paper and tell you plainly which clauses we can and cannot accept.

Subprocessors, in the open

The services that touch your data are listed on one page and kept current.

A direct line

Email a person who knows the product. We scope onboarding and support with you rather than selling a tier.

What is not built

The things procurement asks about.

Being direct saves everyone a review cycle. Today Citeroot does not offer these, and we will not claim them:

  • Single sign-on (SAML/OIDC) and SCIM provisioning
  • Multi-user workspaces with roles — each account is one login
  • Regional data residency or provider/region allow-lists
  • SOC 2, ISO 27001 or other certifications (see the security page)
  • An audit log, an API or an MCP server

Security practices · Subprocessors · DPA

How an evaluation can go

  1. Tell us your questions, markets and constraints
  2. Start a free trial on a real prompt panel
  3. Legal and security review, with us available for questions
  4. Agree limits and terms, then subscribe or sign an annual agreement
Talk to us

Tell us what you’re solving.

Your message goes to a person on the team. Include your volume (prompts, engines, projects) and any compliance requirements so we can answer honestly.

We reply within one business day. We never share your details.

FAQ

Enterprise questions

Do you sign a DPA?

A standard DPA is published on the site. For Expedition agreements we will review your paper and say which changes we can accept.

Can we restrict which AI providers are used?

Not yet. Citeroot collects from ChatGPT, Claude, Gemini and Perplexity, and which engines run is set per project. Provider and region allow-lists are not built.

Can we bring our own provider keys?

No. Answer collection runs on Citeroot’s provider accounts and is covered by your plan’s answer allowance.

Do you have SOC 2 or ISO 27001?

No. We do not hold any certification and we do not claim one. The security page lists what we do today in plain terms.

Can we get SSO?

Not today. Each account has a single login with a password. SSO and shared workspaces are on the roadmap but unscheduled; tell us if they are blockers.

See what AI says about you today.

Add your site and a few questions your buyers ask. Get your first baseline in an afternoon — 14-day free trial · no card.