Draftbox Enterprise is not a wiki with an AI bolted on. It is a governed knowledge substrate where every block is encrypted, every decision is auditable, every AI answer is verified by a second model, and a governor watches the system 24/7. 79 compliance frameworks aligned. FIPS 140-2 encryption. Immutable WORM storage. Your organization's knowledge — protected, verified, and answerable.
Every Draftbox Enterprise instance runs a governor — a security heartbeat that checks infrastructure health every 15 seconds, detects breaches in 30 seconds, and locks the vault automatically on compromise. HMAC-signed heartbeats. Dead man's switch. If the governor stops, the system fails safe — not open.
15-second heartbeat
HMAC-signed health checks every 15 seconds. KV pipeline: PING + 5 SCAN + 5 GET. Healthy → signed heartbeat. Unhealthy → alert + remediation.
Dead man's switch
3 missed heartbeats → governor considered compromised → automatic lockdown. All writes suspended. Only admin can unlock. The system fails safe, not open.
Write-bypass protection
Every database write goes through a bypass-proof gate. Direct writes are blocked or logged. Violations trigger breach signals → governor lockdown. No backdoors.
| Heartbeat interval | 15 seconds (HMAC-signed) |
| Breach detection | 30 seconds → automatic lockdown |
| Dead man's switch | 3 missed heartbeats → fail safe |
| Write gate | Bypass-proof — violations trigger lockdown |
| Module integrity | NIST SI-7 / CM-3 manifest verification |
| Proof-of-Work overload | Computational brake on suspicious traffic |
| Auth firewall | IP banning + tarpit + behavioral auth |
When Aura AI generates a complex answer for your organization, a second independent model checks the reasoning for logical errors, hallucinations, and gaps. If the verification model disagrees, the answer is flagged before anyone sees it. This is not a self-graded exam. It is peer review, automated, on every complex query — at enterprise scale. Every answer carries full provenance: the exact block, the author, the timestamp, the document state.
Deep reasoning (Opus 4)
Multi-step analysis across your entire corpus — entire documents in a single reasoning chain
Independent verification
A separate model architecture checks each reasoning step — flagged before delivery if inconsistent
Full provenance + attribution
Every claim traces to the exact block, author, timestamp, and document state — audit-ready
Background task dispatch
Heavy operations dispatched to Inngest workers — progress via SSE, no timeouts, no blocked users
The editor kernel enforces your organization's lifecycle at the block level. Draft → Decision → Plan → Execution. Each state transition is audited, signed, and immutable. WORM storage ensures executed records cannot be altered — even by admins. RTBF (Right-to-Be-Forgotten) is built in for GDPR compliance. Your knowledge base is not just collaborative — it is court-ready.
Enforced lifecycle
Draft → Decision → Plan → Execution. State transitions are audited and signed. Executed records are immutable — sealed in WORM storage. Your decisions are court-ready.
Granular permissions
Role-based access per document, per block, per workspace. SSO via SAML / OIDC. SCIM provisioning. Behavioral authentication challenges anomalies. Your knowledge is compartmentalized.
WORM + RTBF
Write-Once-Read-Many storage for executed records — immutable audit trail. Right-to-Be-Forgotten processor for GDPR Article 17. Compliance and privacy, both native.
29 bidirectional integrations
Linear, Jira, Slack, GitHub, Notion, Confluence, Salesforce — real-time webhooks, two-way sync. Decisions in Draftbox become actions everywhere. Context from everywhere flows back.
The infrastructure aligns with every standard that matters — from ISO 27001 to FedRAMP, GDPR to the EU AI Act, information security to AI governance, cyber sovereignty to healthcare privacy. Not certified. But the foundation is there, ready when the moment comes.
Information Security
AI Governance
Data Protection
Financial & Critical
Enterprise plans process documents in parallel across 64 workers, cache answers before you ask, and prioritize your organization's queries over everyone else's. Hetzner-primary heartbeat with Vercel fallback. The result: enterprise throughput with startup latency.
~30s
To ingest 1,000 pages
64
Parallel AI workers
~50ms
Cached query response
99.9%
SLA uptime guarantee
| Capability | Teams Pro (€199) | Enterprise |
|---|---|---|
| AI Model (deep) | Claude Sonnet | Claude Opus 4 |
| Reasoning verification | — | |
| Parallel workers | 32 | 64 |
| Lift Power | 10M | 100M |
| Cache retention | 48h | 30 days |
| WORM storage | — | |
| RTBF processor | — | |
| Governor heartbeat | 5 min (fallback) | 15s (Hetzner-primary) |
| Module integrity (NIST SI-7) | — | |
| Background task dispatch | — | |
| SLA | 99.5% | 99.9% |
| Dedicated support | — |
Every block is encrypted at rest with FIPS 140-2 Level 2 hardware keys (AWS KMS). Field-level encryption — each block encrypted individually. If someone breaches the server, they see ciphertext. Breach detection runs every 30 seconds with automatic lockdown. Your data is never used to train AI models — not ours, not anyone's. EU data residency (Frankfurt) by default.
FIPS 140-2 Level 2 encryption
AES-256 with field-level keys. Each block encrypted individually with AWS KMS hardware keys. Server breach → ciphertext only.
30-second breach detection
Governor checks every 15 seconds. Anomaly → automatic lockdown. Vault sealed, writes suspended, admin alerted. Data preserved, not destroyed.
Every enterprise is different — seat count, storage, SLA, residency, integrations. We build the plan around your organization, not the other way around. Contact sales for a tailored proposal.
Custom / month
For organizations that need governance, scale, and verified AI.
Custom / month
For regulated industries — government, healthcare, finance.
Custom / year
For classified environments — on-premise, air-gapped, sovereign.
Governor-secured. Two-model verified. 79 frameworks aligned. One substrate where your enterprise's knowledge is protected, auditable, and answerable.