Enterprise
You run it, and you pay one flat fee.
KnownScope deploys into your own infrastructure against your own database. Access is explicit, tenant boundaries are enforced in the database itself, and the licence doesn't charge you more for adding the people who own the systems.
Enterprise foundations
Identity, isolation, automation, and exit are part of the product.
Human access follows enterprise identity.
People sign in through OIDC. The identity provider keeps the MFA policy, while KnownScope maps users and groups to Owner, Worker, and Viewer access inside each Campaign.
Authorization stays with the data.
The service checks Campaign access on every request and enforces tenant separation in the database. Search, dashboards, exports, and notifications return only records the caller can read.
Machine access is narrow and replaceable.
API credentials are scoped, expiring, rotatable, and revocable. Approved read-only Data Sources and signed webhooks use bounded configuration and leave an audit trail.
The exit path is part of the service.
Documented exports and API endpoints provide a route for permitted Campaign data. Retention, deletion, portability, and account closure belong in the customer agreement, not in an informal promise.
Answers, not principles
The four things people ask before they will start.
If one of these rules us out for you, it should rule us out in the first two minutes rather than in the fourth meeting.
- Where it runs
- You run it. KnownScope deploys as containers against your own PostgreSQL, in your cloud account or your data centre, so residency is a question you answer, not one we answer for you. A hosted option arrives at launch and is billed separately from the licence.
- What it costs
- A flat annual platform fee for the software. Not per seat, not per Item, not per Campaign. Viewers and the business contributors who update a row twice a year are never chargeable seats, because a price that punishes you for adding the people who own the systems would defeat the product.
- What the preview is
- Rob Fuller sits with your team, builds the first Campaign against a real response you have already run, and stays reachable while you use it. Preview participants keep their first-year price for three years.
- Getting your data out
- CSV and JSON export for Owners and Workers, plus the same documented API the product uses itself. Retention, deletion, portability, and what happens after an account closes belong in the agreement rather than in an informal promise.
Security review
Control design and independent assurance are separate questions.
The security page explains how KnownScope protects access, changes, imports, operations, and recovery. There is no certification to show you yet. When there is one, it will be named here with its scope and its date, and not before.
See the security model →Next step
Send the requirement that would rule us out.
Identity, hosting, recovery, procurement thresholds. Send the one that usually kills a vendor evaluation and we will answer it first.