Identity
Google SSO on Team. SAML and OIDC on Company and Enterprise. SCIM on Enterprise.
Security
SOC 2 Type II. SAML on Company. Residency on Enterprise.
Vellum does not train models on customer graphs. Logs retain 13 months. Encryption at rest and in transit.
Data residency
US by default. EU residency is an Enterprise option. No mixed-region graphs.
Access
Role-based publish rights. Audit log export on Enterprise.
Reports
SOC 2 Type II report available under NDA on Company and above.