- Model providers
- Anthropic, OpenAI, and Perplexity integrated natively, plus OpenRouter for Google, Meta, Mistral, DeepSeek, xAI, Cohere, and hundreds more.
- Model routing
- Admin-controlled catalog, ordering, and workspace default, with one backup model per model that takes over before any output is shown.
- Company context
- Microsoft 365 (mail, calendar, Teams chat, tasks, files) and Google Workspace (Gmail, Calendar, Drive), each authorized per user and off until that user connects it.
- Research
- Web search with citations through Perplexity, Google, or Brave, routed in only when a question needs current sources.
- Files
- PDF, Word, Excel, PowerPoint, text, CSV, and images up to 50 MB per file, parsed into the conversation.
- Deliverables
- Word, Excel, PowerPoint, PDF, and image files generated in isolated, network-less sandboxes. Exports to DOCX, XLSX, PDF, Markdown, and JSON.
- Identity
- SSO with Google, Microsoft, or Auth0. SCIM 2.0 user provisioning and deactivation. TOTP two-factor authentication with backup codes.
- Roles
- Optional job-function roles with allow-lists for models, features, Skills, agents, connectors, and MCP tools, plus each role's own starter tiles and default model.
- Tenancy
- One application database per workspace. Provider keys, connector tokens, and credentials are encrypted before storage.
- Audit
- Audit log of admin actions, sign-ins, and user activity. Each entry stores the hash of the one before it; administrators can verify the chain in the console and export it with the hashes.
- Cost visibility
- Usage and calculated cost by model, user, agent, and feature, from the model prices your administrators set.
- Retention
- Optional retention windows from 30 days to 10 years, set per workspace, with durable deletion of stored files.
- Extensibility
- MCP tool catalog with per-connection tool policies, reusable agents and Skills, custom apps built inside the workspace, and automations with approval steps.
- API
- OpenAI-compatible model list and chat completions, streaming included, under personal API keys. Requests follow the user's role and model allow-list, with token and cost reporting per request.
Capabilities are enabled per workspace. Certifications, retention terms, and provider contracts are confirmed for each deployment.