---
title: "Enterprise"
url: "/docs/enterprise"
canonical_url: "https://docs.litellm.ai/docs/enterprise"
type: "docs"
last_updated: "2026-10-09"
summary: "LiteLLM Enterprise is the open-source AI Gateway plus SSO, audit logs, delegated admin roles, multi-region deployment, and support SLAs, self-hosted in your cloud."
related:
- "/docs/learn/enterprise_quickstart"
---
# Enterprise
> Index of all LiteLLM docs: https://docs.litellm.ai/llms.txt
**Give every team access to AI. Keep control of who uses what, and what it costs.**
LiteLLM Enterprise is the open-source AI Gateway plus single sign-on, audit logs, delegated admin roles, and support from the engineers who build it. It runs in your cloud, so prompts and responses never leave your environment.
Talk to sales: https://www.litellm.ai/enterprise#talk-to-sales. Start a 30-day trial: https://www.litellm.ai/enterprise#trial. SOC 2 Type II report: https://trust.litellm.ai/
## What you get on top of open source
Enterprise is a license key on the same Gateway image you may already run. Nothing to migrate: each layer includes everything below it.
- **Enterprise** (License key on the Gateway): [SSO and SCIM](https://docs.litellm.ai/docs/proxy/admin_ui_sso), [Audit logs](https://docs.litellm.ai/docs/proxy/multiple_admins), [Org and team admins](https://docs.litellm.ai/docs/proxy/access_control), [Secret managers](https://docs.litellm.ai/docs/secret_managers/overview), [IP allowlists](https://docs.litellm.ai/docs/proxy/ip_address), [Per-team logging](https://docs.litellm.ai/docs/proxy/team_logging), [Multi-region](https://docs.litellm.ai/docs/proxy/multi_region), [Support SLAs](#professional-support)
- **AI Gateway** (Open source, self-hosted): [Virtual keys](https://docs.litellm.ai/docs/proxy/virtual_keys), [Budgets and rate limits](https://docs.litellm.ai/docs/proxy/users), [Spend tracking](https://docs.litellm.ai/docs/proxy/cost_tracking), [Admin UI](https://docs.litellm.ai/docs/proxy/ui), [Load balancing](https://docs.litellm.ai/docs/proxy/load_balancing), [Guardrails](https://docs.litellm.ai/docs/proxy/guardrails/quick_start), [MCP gateway](https://docs.litellm.ai/docs/mcp), [Any language](https://docs.litellm.ai/docs/proxy/client_setup/overview)
- **Python SDK** (Open source library): [100+ providers](https://docs.litellm.ai/docs/providers), [OpenAI format](https://docs.litellm.ai/docs/completion/output), [Router and fallbacks](https://docs.litellm.ai/docs/routing), [Cost per call](https://docs.litellm.ai/docs/completion/token_usage), [Logging callbacks](https://docs.litellm.ai/docs/observability/callbacks)
## What changes for your organization
- [Audited security you can hand to your review team](https://trust.litellm.ai/): SOC 2 Type II audited, self-hosted so no data leaves your environment, and signed Docker images you can verify. ([Verify the signed images](https://docs.litellm.ai/docs/proxy/docker_image_security))
- [Everyone signs in with your identity provider](https://docs.litellm.ai/docs/proxy/admin_ui_sso): SSO and SCIM for Okta, Entra ID, Google Workspace, or any OIDC or SAML provider. Access follows your org chart.
- [Every admin action is on record](https://docs.litellm.ai/docs/proxy/multiple_admins): Audit logs of key, team, and model changes, with retention policies your compliance team sets.
- [Teams run their own keys and budgets](https://docs.litellm.ai/docs/proxy/access_control): Team admins manage keys, models, and budgets per project, tag, and model without the master key, with alerts before anyone hits a cap.
- [Provider keys stay in your vault](https://docs.litellm.ai/docs/secret_managers/overview): AWS, Azure, Google, HashiCorp Vault, and CyberArk secret managers, with automatic virtual key rotation.
- [Engineers on call](https://docs.litellm.ai/docs/enterprise/support): A dedicated Slack or Teams channel with the people who build LiteLLM, and 24/7 SLAs down to one hour.
Talk to sales about LiteLLM Enterprise: https://www.litellm.ai/enterprise#talk-to-sales
## Who is Enterprise for?
For teams running LiteLLM at scale (100+ users or 10+ production AI use cases) that need SSO, audit logs, fine-grained access control, and professional support on top of open source. SSO is free for up to 5 users; beyond that, an Enterprise license is required. Engineers evaluating a trial can follow the [Production rollout](/docs/learn/enterprise_quickstart) guide, and teams already on open source can start with [Moving from OSS](/docs/enterprise/moving_from_oss).
## Full feature list
Everything below is enabled by the license key. Each item links to its setup guide.
### Security and access
- **[SSO for the Admin UI](./proxy/admin_ui_sso.md)**. Okta, Azure AD, Google Workspace, and any OIDC/SAML provider
- **[JWT-based Authentication](./proxy/token_auth.md)**. Authenticate requests with your identity provider's tokens
- **[Audit Logs with retention policies](./proxy/multiple_admins.md)**. Track every admin action and key-level change
- **[Role-Based Access Control](./proxy/access_control.md)**. Organizations, teams, and user roles
- **[Public and private route controls](./proxy/public_routes.md)**. Restrict admin routes and lock down surface area
- **[IP address-based access control lists](./proxy/ip_address.md)**. Restrict proxy access to specific CIDR ranges
- **[Key Rotations](./proxy/virtual_keys.md#-key-rotations)**. Automate rotation for virtual keys
- **[Secret Managers](./secret_managers/overview.md)**. AWS KMS, AWS Secrets Manager, Azure Key Vault, Google KMS, Google Secret Manager, HashiCorp Vault, CyberArk, or a custom secret manager
- **[AI Hub](./proxy/ai_hub.md)**. Share a public, branded page of available models, MCP servers, agents, and skills
### Governance and cost
- **[Multi-tenant Architecture](./proxy/multi_tenant_architecture.md)**. Organizations, teams, projects, and keys
- **[Project Management](./proxy/project_management.md)**. Group keys by application or use-case, with a budget, owners, rate limits, a model allowlist, and an isolated spend view. See the [UI walkthrough](./proxy/ui_project_management.md)
- **[Tag-based Budgets](./proxy/provider_budget_routing.md)**. Budgets and spend tracking by custom tag
- **[Model-specific Budgets per Virtual Key](./proxy/users.md)**. Different limits per model, per key
- **[Temporary Budget Increases](./proxy/temporary_budget_increase.md)**. Time-boxed spend bumps without permanent changes
- **[Soft Budget Email Alerts](./proxy/ui_team_soft_budget_alerts.md)**. Warn teams before they hit hard limits
- **[Generate Spend Reports](./proxy/cost_tracking.md#-enterprise-generate-spend-reports)**. Programmatic access to spend by key, team, tag, or model
### Observability and compliance
- **[SOC 2 Type II](https://trust.litellm.ai/)**. Audited controls; request the report through the Trust Center
- **[Team-Based Logging](./proxy/team_logging.md)**. Route each team's logs to their own Langfuse project or callback
- **[Disable logging per team](./proxy/team_logging.md#disable-logging-for-a-team)**. GDPR-friendly opt-out at the team level
- **[Log export to GCS / Azure Blob](./observability/gcs_bucket_integration.md)**. Durable storage for compliance
- **[Guardrails per key/team](#guardrails-oss-vs-enterprise)**. Secret redaction, content moderation, banned keywords
- **Enforced required params**. Reject requests missing required metadata
### Operations and branding {#operations--branding}
- **Custom Swagger branding**. Set your own title, description, and filtered routes on the API docs page
- **[Custom email branding](./proxy/email.md#email-customization)**. Your logo and colors on system emails
- **Max request/response size limits**. Protect the proxy from runaway payloads
- **[Team-managed models](./proxy/team_model_add.md)**. Let teams bring their own keys and fine-tunes
### Which guardrails need a license? {#guardrails-oss-vs-enterprise}
The OSS guardrail framework includes custom guardrails and Presidio for PII masking. These built-in callback integrations require a LiteLLM Enterprise license: `llmguard_moderations`, `llamaguard_moderations`, `hide_secrets`, `openai_moderations`, `google_text_moderation`, `lakera_prompt_injection`, and `aporia_prompt_injection`.
## Run it
Deploy the Docker image, or build from the pip package, on your own infrastructure. A license key enables the features above and includes a dedicated support channel.
```env
LITELLM_LICENSE="eyJ..."
```
No data leaves your environment, and LiteLLM is [SOC 2 Type II](https://trust.litellm.ai/) audited. [Procurement is available through AWS and Azure Marketplace.](./data_security.md#legalcompliance-faqs)
Pricing depends on your deployment size. [Get in touch](https://enterprise.litellm.ai/demo) to scope it.
## Support {#professional-support}
Every license includes a dedicated Slack or Teams channel with the engineering team. With the optional 24/7 SLAs, the response time is 1 hour for Sev 0 and 72 hours for security patches. See [Support and SLA](/docs/enterprise/support) for hours, the full severity table, and custom SLAs.
## Version support
LiteLLM supports the four most recent stable minor lines, and Enterprise and open source share one image and one version number. See [Version support](/docs/enterprise/version_support).
## FAQ
### How do I set up and verify an Enterprise License?
Add the license key to your environment, then restart the proxy.
```env
LITELLM_LICENSE="eyJ..."
```
Open `http://:/`. The API docs page should show **Enterprise Edition** in the description. If it does not, confirm the key is correct and unexpired, and that the proxy was fully restarted.
### Is LiteLLM SOC 2 compliant?
Yes. LiteLLM is SOC 2 Type II audited. Request the current report through the [LiteLLM Trust Center](https://trust.litellm.ai/). For data handling, vulnerability reporting, and the rest of the security review, see [Data Security, Legal, and Compliance FAQs](./data_security.md).
### Can we buy through AWS or Azure Marketplace?
Yes. You can buy an Enterprise license through AWS Marketplace or Azure Marketplace, or directly by invoice. See [Procurement Options](./data_security.md#legalcompliance-faqs).
### Where can I read more about data security and compliance?
See [Data Security, Legal, and Compliance FAQs](./data_security.md).
### How is pricing structured?
Pricing is based on usage. [Contact us](https://enterprise.litellm.ai/demo) for a quote tailored to your team.
### How do I get day-0 support for new models without restarting?
Use [Auto Sync New Models](./proxy/sync_models_github.md) to pull the latest pricing and context-window data from GitHub on demand or on a schedule, with no restart required. Trigger a manual sync with `POST /reload/model_cost_map`, or schedule periodic syncs with `POST /schedule/model_cost_map_reload?hours=6`.
Talk to sales about LiteLLM Enterprise: https://www.litellm.ai/enterprise#talk-to-sales
## Related pages
- [Production rollout](https://docs.litellm.ai/docs/learn/enterprise_quickstart.md)