Enterprise controls

Same meter as Pricing; extra controls are contract terms. Below is what the product actually has versus what we negotiate. Banana Peel is SOC 2 Type II — see Compliance.

Shipped

• Custody policies — trusted_runners / deck_only / any / pinned:…. Enforced on every credentialed run. Docs.
• Vault + hashed API keys — AES-256-GCM secrets; SHA-256 API keys. Encryption.
• Run-level custody audit — banana_peel.custody on the response and persisted run (policy, allowed runners, source). Credential last_used. Redacted routing traces. This is not a SIEM-grade immutable audit log product.
• Routing transparency — every brain-routed run carries banana_peel.routing_summary (executed runner, strategy, machine reason code, per-attempt fault attribution), and GET /api/v1/responses/:id/explanation returns the full decision card. Docs.
• Spend controls — per-run max_cost_usd hard ceiling in every routing mode (Learning-family defaults to $20); the governing ceiling is echoed under banana_peel.budget, and POST /api/v1/estimate previews cost before you run. Docs.
• Run deletion — DELETE /api/v1/responses/:id purges copied screenshots and artifact bytes immediately and tombstones the id.
• Default 7-day retention — copied screenshots and artifacts. Enterprise can set 24h / 7d / 30d in Console or PATCH /api/v1/workspace. Zero-retention and longer windows are contract terms. Retention.
• Signed webhooks — outbound HMAC-SHA256 webhooks for response lifecycle events. Webhooks.

On request / not self-serve

• SSO / SAML — available on Enterprise. Self-serve Console auth is email + password or Google sign-in via Google Identity Platform; SAML/OIDC is provisioned as part of an Enterprise agreement.
• BYOK (bring your own provider keys) — listed on Pricing for enterprise; there is no self-serve API to inject your OpenAI/Anthropic keys today.
• Custom proxies — some runners expose proxy flags (residential vs datacenter). A customer-wide proxy allowlist is not a self-serve control.
• Region pinning — available on Enterprise, along with contractual data-residency commitments. Regional execution.
• Zero data retention — contract term, not a dashboard toggle.

Talk to us

Contact sales · Security hub