⚡

ENTERPRISE TIER — COMING SOON

The enterprise features below are built and working today. A dedicated enterprise licence tier with volume pricing and priority support is in preparation. HARBOUR AI does not yet hold Cyber Essentials certification; it is planned.

In the meantime, get in touch to discuss your organisation's requirements. We'll work with you directly.


Built for IT departments.
Loved by the people using it.

Every enterprise feature ships in the same installer as the standard product. No separate enterprise build. No vendor lock-in.

🔐 SSO
Active Directory & SSO

LDAP direct bind to Active Directory. SAML 2.0 with XMLDSig verification — supports Microsoft Entra ID, Okta, and Google Workspace. Users auto-provisioned on first login. Full admin config tab.

👥 TEAM MODE
Shared Team Workspace

Shared memories, shared prompt library, and a team usage dashboard. All users on the same instance see the same curated knowledge base and approved prompts. Full admin control.

🔌 AIR-GAPPED UPDATES
Internal Update Server

Set HARBOUR_UPDATE_SERVER to point Electron's auto-updater at your intranet instead of GitHub. IT drops release artifacts on an internal file server. Users on locked-down networks update without touching the internet.

🛡️ SECURITY
Full Security Hardening

20+ vulnerabilities audited and fixed. No shell=True, no path traversal, CORS hardened, all auth gaps closed. Pre-release security scan on every version. Full SECURITY_LOG published on GitHub.

📊 SCHEDULED REPORTS
Automated EMMA Reports

AI reports generated on daily, weekly, or monthly schedules. Choose an agent, write the prompt, and results land in your inbox via email. Run Now for immediate generation. APScheduler — survives restarts.

🗂️ AUDIT TRAIL
Tamper-Evident Audit Trail

Every action logged — who sent what, when, from which agent, on which session — with a SHA-256 chain hash linking each entry to the previous (GENESIS anchor). Any modification, deletion, or insertion breaks the chain. One-click VERIFY CHAIN in the admin panel. Login events logged with IP address. Exportable as CSV for ICO evidence packs and internal governance.

🛡 DATA PROTECTION
PII Auto-Redaction

11 UK PII types detected and redacted from every chat message before it reaches any AI model — NHS numbers, National Insurance numbers, postcodes, phone numbers, email addresses, credit card numbers, sort codes, bank account numbers, dates of birth, passport numbers, and driving licence numbers. Toggle on in Admin → PII. Every redaction event logged with type, count, user, and session. Supports data minimisation under UK GDPR.

🏥 SECTOR PACKS
5 Regulated Sector Packs

Legal (SRA, GDPR), Accountancy (FCA, AML), HR (ACAS, data protection), Education (KCSIE, Ofsted EIF, SEND), Healthcare (CQC, MCA 2005, Duty of Candour, NHS DSPT). Templates, prompts, and memory facts built in.

🏢 KNOWLEDGE BASE
Company Knowledge Base

Persistent always-on RAG namespace. Upload your policies, procedures, and documents once. Every agent query is contextualised against your organisation's own knowledge — automatically, on every conversation.

⚙️ REST API
REST API & Integrations

Full REST API with API key management. MCP support (stdio, HTTP/SSE, Streamable HTTP). Docker deployment for server or VPS installs. Fits into your existing infrastructure.

What's coming for enterprise.

In active development. If something here is a blocker for your organisation, let us know and we'll prioritise it.

LIVE
SSO / Active Directory

LDAP + SAML 2.0 — Entra ID, Okta, Google Workspace. Shipped in v1.0.52.

LIVE
Air-gapped update server

HARBOUR_UPDATE_SERVER env var — internal intranet updates, no GitHub access required. Shipped in v1.0.60.

SOON
macOS build

Not yet available. Needs Apple Developer code-signing and a working Mac build machine; the old CI job targets a retired runner and has never produced a release.

SOON
Cyber Essentials certification

UK government procurement requirement. Unlocks NHS trusts, councils, and schools with a budget code. Planned — not yet held. This page will say so when it is.

SOON
Enterprise licence & volume pricing

Dedicated enterprise tier with volume seat pricing, priority support SLA, and onboarding assistance. Contact us now to discuss.

PLANNED
G-Cloud listing

UK government procurement framework. Puts HARBOUR AI in front of every NHS trust, council, and school with a budget code.

Built for where GDPR bites hardest.

Sectors where a cloud AI data breach isn't just embarrassing — it's a regulatory event.

🏥 NHS & HEALTHCARE
NHS Trusts, GP Practices, Care Providers

Article 9 health data never leaves the network. NHS DSPT compatible. Air-gapped updates for locked-down clinical networks. CQC, MCA 2005, Duty of Candour sector pack built in. No data processor agreement required — you are the sole controller.

⚖️ LEGAL
Law Firms, Barristers' Chambers, In-house Legal

Client privilege protected by design — matter files never touch a cloud AI. Legal sector pack with SRA Code of Conduct, GDPR, AML prompts and templates built in.

🏫 EDUCATION
Schools, MATs, Universities, Local Authorities

Pupil data stays on your servers. KCSIE 2023, Ofsted EIF 2023, SEND/EHC sector pack included. Air-gapped updates work on school networks with restricted internet. No DPA required — no third party ever handles pupil data.

🏛️ FINANCIAL SERVICES
FCA-Regulated Firms, Accountancies, IFAs

Tools for FCA Consumer Duty and AML work. No client financial data in any cloud AI. Accountancy sector pack with FRS 102, Companies Act, AML prompts. Full audit trail to support your FCA record-keeping.

The cloud AI problem for enterprise.

CLOUD AI RISK
  • ✗  Data processed on third-party servers
  • ✗  DPA required — you are a data processor
  • ✗  ICO AI guidance on processor risk applies
  • ✗  Client / patient data in training pipelines
  • ✗  Blocked by IT policy on air-gapped networks
  • ✗  Monthly subscription — budget unpredictability
  • ✗  Vendor can change terms, pricing, or shut down
HARBOUR AI
  • ✓  All inference runs on your hardware
  • ✓  No DPA — you are the sole controller
  • ✓  ICO processor guidance does not apply
  • ✓  Data never leaves your network
  • ✓  Air-gapped updates via your intranet
  • ✓  One-time payment — no ongoing costs
  • ✓  Proprietary closed-source — you may penetration test your own installation without asking us
GET IN TOUCH

Let's talk about
your requirements.

Tell us your sector, number of users, and any compliance requirements. We'll come back within one working day.

EMAIL US ↓ DOWNLOAD & TRY FREE

14-day free trial · no payment details required · GDPR compliance statement