# Enterprise

SSO, the admin and viewer roles and the audit log come with Business and Enterprise. Enterprise adds the SLA and limits set by contract: see [Plans and limits](../get-started/plans-and-limits#enterprise).

| | |
| --- | --- |
| [SSO](sso) | Sign in through your identity provider over OpenID Connect, and require it for the workspace. |
| [Email domains](domains) | Prove your company's domains, so your provider speaks for addresses there. |
| [Roles](roles) | Owner, admin, editor and viewer, and what each may do. |
| [Break-glass](break-glass) | Owners' logged way in when your provider is down. |
| [Audit log](audit-log) | Every sign-in and change, exportable as CSV or JSON Lines. |
| [The SLA](https://latitude10.tech/legal/sla) | The service levels Enterprise is held to. |

## What's true in code

Sign-in is with GitHub or an emailed link that works once, for 15 minutes. SSO is OpenID Connect, on Business and Enterprise.

The audit log is append-only: the database refuses changes, and deletes of events younger than 30 days. It's kept 90 days on Business and 365 on Enterprise.

Uptime is published on our status page, and the SLA covers Enterprise.

The [status page](https://status.latitude10.tech) shows each check and every incident.

## Where this comes from

- `app/enterprise/_lib/sso.ts`
- `app/enterprise/_lib/audit.ts`
- `app/legal/_content/sla.tsx`
- `app/security/_lib/facts.ts`
- `migrations/0015_enterprise.sql`
- `app/workspace/_lib/quotas.ts`