# Business

> Single sign-on, audit, retention and your own server.

Canonical: https://porticol.app/business

Single sign-on, an audit trail you keep as long as you need, and a server you can run yourself.

## Identity and access

Single sign-on, sign-in policy and custom roles for your organisation.

- SAML and OIDC single sign-on, required for your verified email domains, with groups mapped to roles and a break-glass owner.
- A sign-in policy: a second factor, session length, idle timeout, session limit, password length and an IP allowlist.
- Custom roles made from a fixed list of permissions.

[More about identity](https://porticol.app/features/enterprise-identity)

## Audit and retention

An audit log of every security-relevant and data-changing action, sent to your SIEM, kept as long as you choose.

- Every route writes an audit entry or carries a written reason why not, and a test holds that.
- Search the audit log and download it.
- Send the audit log to syslog (RFC 5424), CEF, signed webhooks or S3-compatible storage, in order and with retries.
- Owners set how long runs, monitor runs, history and the audit log are kept, within what the plan allows.
- Export everything the organisation holds as one archive, or delete the organisation.
- One console for members, groups, roles, single sign-on, policy, audit, SIEM, retention, billing and usage.

[More about governance](https://porticol.app/features/governance)

## Your own server

Run the Porticol server on your own infrastructure, for one organisation.

- The same server as Porticol Cloud, run in team mode.
- Licensed per installation with a signed licence file.
- Encrypted backups on a schedule, each verified after it is written.
- Every change to the server is tested by upgrading from the previous release and rolling back.

[More about team server](https://porticol.app/features/team-server)

## Buying for a team

Create an account and choose Business under Billing. For a licence to run the team server yourself, or more than 100 seats, [contact us](https://porticol.app/contact). For a security review, start with the [security page](https://porticol.app/security).