Who this plan is for
The regulated mid-market and companies of scale. The common thread isn’t size: it’s how much compliance weighs in the decision.
Two ways in
Enterprise addresses advanced audit and assurance needs. A regulated activity requires a human review of the selected plan and hosting, whatever your headcount; it does not automatically require Enterprise.
The free core stays whole
Being regulated never locks you out of Kastel Core: free self-hosting is complete, with no size threshold, for everyone.
The sectors we serve
Healthcare and health data, finance and insurance, the public sector, IP-heavy industry, and defence-adjacent organisations.
What the Enterprise plan adds
Always on top of Kastel PME, never a replacement: base governance - who's allowed to see what, who approves what - already lives in the free core. Enterprise adds what an external auditor asks to see.
Regulatory compliance (AI Act)
A guarantee matrix kept current, exportable for an auditor without a single byte of content leaving with it.
Consolidated audit across sites
The log for every one of your instances, filterable by action, effect, date, in one table - not one export per deployment to reconcile by hand.
Erasure and audit evidence that shows when it has been altered
Every governed deletion produces an attestation signed with a key of its own, unique to your organisation: verifiable offline, and it fails the moment the log has been altered.
Audit chain anchoring
You archive the head of your sealed audit chain yourself, at your own pace, into your own vault. A way to check nothing was rewritten after the fact - not just our word for it.
Private evaluations of your models
Recall and fidelity measured on your own instance, never on content that leaves it: a way to judge an AI provider switch on evidence instead of guesswork.
Two modes, one plan
Enterprise is offered self-hosted or managed. Team and SME can also be operated on your infrastructure, on quote. Solo remains managed. Paid self-host features require a subscription verified online daily.
Self-hosted
You run Kastel on your own infrastructure, in your own country. You operate the engine and the Enterprise layer yourself, on your own network: we have no access to it.
Managed
We host and operate an isolated instance, dedicated to your organisation alone, in Europe. Never an engine shared between companies.
The Kastel Regulated package
For sectors where compliance has a specific name - healthcare, finance and insurance, the public sector - a set of additional guarantees, built with you and priced case by case. Never an off-the-shelf catalogue, never a separate edition: an add-on to the Enterprise plan, on quote.
Every regulated deployment has its own constraints: a certified host for health data, a sector-specific compliance file, dedicated governance across several entities. We build these with you, sector by sector - never before they're real for you.
Talk about your caseWhat stays true, whatever the plan
Enterprise adds assurance and audit. It changes nothing about the principles that hold for everyone, from the free core to managed Enterprise.
Your own AI keys, always
BYOK stays mandatory even in managed mode: your AIs run on your own keys, at the provider you already use. Kastel never resells inference and never takes a cut of it.
You decide what each AI is allowed to see
The same permission that governs an employee governs an agent: per person, per AI, never a global default access.
Full export, open interface
The engine stays our recipe, closed; you own your data and your context, exportable in one command, at any time, in a format that locks nothing in.
Base governance is never paid
Who's allowed to see what, who approves what: that's already in Kastel Core, free. Enterprise adds the audit and compliance a regulator asks for, not governance itself.
Let's talk about your compliance file.
Not a lengthy qualification form: a direct conversation, with someone who knows the product and can decide on the spot. Tell us your sector, your constraint, and where you stand.