New: AI spend limits now cover the agent builder and the project planner →
Product
AI Teammates
Solutions
Resources
PricingEnterprise
Start free Book a demo Log in
Enterprise

One workspace for the whole company. Run by IT’s rules.

SSO and SCIM, audit and access review, AI under control, and the option to run it on your own servers.

Annual, from 25 seatsCloud or self-hostedSLA included
🛡️Access reviewCSV
Projects & itemsInvitesVaultsTokens & links
Finance & compliancePrivate project · 4 people: 2 owners and admins, 2 project members
Sales pipelineEveryone in the workspace · 38 people
Ops loginsVault · members only · 3 people a manager added
1 weak
API token “CI deploy” · DevNot used for 90 days
Revoke
Public link · Q4 roadmapShared by Priya · expires in 12 days
Revoke
Public links in this workspaceTurn off to stop every link at once
Why companies consolidate here

Fewer tools. One place to keep in order.

Fewer tools

Task lists, wikis, tables, dashboards, forms, goals, chat and password vaults: 10 kinds of work in one place, each team with its own workflow.

One place for permissions

One identity provider, one set of roles, one access review. Removing someone removes them everywhere.

AI with approvals

AI teammates do real work, and anything they change in another tool can wait for a person.

Data where you choose

TaskCrew Cloud, or your own servers in your own region, with your own AI provider key.

Identity & access

Sign in with your identity provider. Leave the same way.

Set it up in Settings, test it, then require it.

  • SAML 2.0 with Okta, Microsoft Entra ID, Google Workspace and other identity providers
  • Require SSO after a test sign-in passes; owners keep an emergency password, and every use is logged
  • SCIM 2.0 provisioning: people turned off in your identity provider lose access at once
  • Only addresses at email domains you’ve verified can sign in
  • Guests see only what you share with them, and never count as seats

How sign-in is protected

🔑Single sign-on & provisioningOwners only
🔐
SAML 2.0 · OktaTest sign-in passed · 14 Oct, 09:40
Connected
Require SSOOwners keep their password for emergencies, logged
Create accounts on first sign-inFor people your identity provider signs in
SCIM provisioningtcscim_8f2… · last used 2 minutes ago
Replace token
Email domainsnorthwind.example · DNS record found
Verified
Audit & review

Know who did what, and who can open what.

Two audit logs and an access review, each one a CSV away from your auditor.

  • An audit log across every project, with person, project, kind and date filters
  • A Workspace & sign-in log: joins, removals, role changes, invites, SSO, SCIM and API tokens
  • Access review: who can open each project and how they got access, pending invites, vault health, API tokens, calendar and public links
  • Unlimited audit history on Enterprise

See the controls

📜Audit logCSV
TasksWorkspace & sign-inWho: anyoneToday
Sara changed Dev from member to adminRole change · IP 203.0.113.24
SCIM turned off Raj PatelMembership ended · taken off 3 tasks · tokens stopped
Fatima used her password while SSO is requiredOwner emergency sign-in
Dev created the API token “CI deploy”Expires in 90 days
SSO sign-in refusedAddress outside the verified domains
AI governance

AI teammates your security team can sign off.

Each run is sealed off, every outside action can wait for a person, and spending has a hard limit.

Asks first

Each action in Slack, HubSpot, Gmail and other connected tools waits for Approve or Reject, with the exact details.

Sandboxed

Every run gets its own sealed container: no network, no secrets, a read-only file system.

Spend limit

Set a monthly limit. At the limit AI pauses until you raise it or the month ends. No surprise bill.

Every step logged

Every tool call, with its inputs, results and timing, is written to the audit log by the runner, not the AI.

Sees what you share

Ask your workspace answers only from what the person asking can open.

Never sees passwords

Password vaults are invisible to AI teammates, MCP, search and exports.

AI usage report

Spend, tokens and runs by AI teammate, project, person and month, for owners and admins only.

A limit per workspace

A monthly limit in US dollars, with alerts at 80% and 100%. At the limit AI pauses: no overage, ever.

People decide

Approvals are never made by AI teammates or API tokens, and no answer within 30 minutes means no.

How AI control works

Data & deployment

In our cloud, or on your own servers.

TaskCrew Cloud

We run it, back it up and update it.

  • Start today, and invite your team as you go
  • Daily backups and updates, done for you
  • Hosting provider named on the subprocessors page
  • An SLA on the Enterprise plan

Self-hosted

One Docker Compose file, on servers you control.

  • Your region for the database, files, email and AI provider
  • Any S3-compatible storage: AWS S3, Cloudflare R2, Backblaze B2, MinIO
  • Daily database backups to your bucket, and a restore guide
  • gVisor as an option for stronger sandbox isolation

Self-host with Docker

Admin controls

Switches for the people who run the workspace.

Item types on or off. Hide the kinds of work your company doesn’t use

Automation & connector health. Which rules fail or were turned off, and how often each connector errors

AI usage. Spend by teammate, project, person and month, and the monthly limit

Public link kill switch. Stop every public link in the workspace at once

Trash and typed confirmations. Restore deleted work; deleting for good lists what will be lost

Sharing overview. Every guest and every public link in one place, with remove and revoke

Services

Help getting the whole company in.

Onboarding

We help you set up single sign-on, provisioning and the first teams’ projects, and agree the details with you up front.

Migration help

Importers for Jira, Trello, Asana, ClickUp and monday.com, with a dry run and Undo. For bigger moves, we plan and run the import with you.

An SLA

The Enterprise plan includes a service level agreement. We agree its terms with you as part of the contract.

SAML SSO and SCIMAudit log and access reviewEncrypted secretsGuests see only what you share
Read about security
Talk to sales

Tell us about your company.

We’ll reply by email to set up a call with the right people on both sides.

  • Plans and pricing from 25 seats, billed annually
  • Single sign-on, SCIM and your security review
  • Cloud or self-hosted, and where your data lives
  • Moving your projects over from another tool

Rather write directly? sales@taskcrew.com

Sending opens your email app with this filled in. Or write to sales@taskcrew.com directly.

FAQ

Questions, answered

Where is our data stored?

In TaskCrew Cloud, with the hosting provider named on our subprocessors page. If you self-host, it stays wherever you run it: you choose the region for the database, files, email and AI provider. See self-hosting.

Can we run it on our own servers?

Yes. TaskCrew runs from one Docker Compose file, with automatic HTTPS, daily backups to your S3 bucket and your own AI provider key. How self-hosting works.

Do you have SOC 2 or ISO 27001?

There is no SOC 2 report or ISO 27001 certificate to show you today, so we don’t show badges. Those audits cover the organisation that runs a service, not software. TaskCrew gives you the controls they look for, mapped control by control on the security page.

Is there a minimum?

Enterprise is billed annually, from 25 seats. Guests, AI teammates, public-link viewers and form respondents never count as seats.

What does Enterprise add to Business?

SAML single sign-on, SCIM provisioning, unlimited audit history and an SLA, on top of everything in Business. Compare plans.

Which AI model do you use, and where do prompts go?

AI runs on deepseek/deepseek-v4-flash through OpenRouter. By default, AI requests only go to model providers that don’t keep or train on prompts. AI teammates never see password vaults, and you can set a monthly spend limit at which AI pauses.

Bring the whole company into one place.

Enterprise is billed annually, from 25 seats. Or start free and grow into it.

SAML SSO and SCIMUnlimited audit historyCloud or self-hosted