Organizations. Self-serve sign-up creates an organization at its own subdomain, with a free trial. Data is isolated per organization by PostgreSQL row-level security.
Users and roles. Organization roles (owner, admin, member, reader) and email invitations.
Single sign-on. Per-organization OIDC or SAML (Entra ID, Okta, Google Workspace and others), with optional enforcement.
Signatures. Every signature re-authenticates the signer by password, SSO step-up or passkey.
AI assistants. The MCP server accepts OAuth 2.1 as well as bearer tokens. Assistants edit drafts and never sign.
Billing. Plans through Stripe Checkout, with the Stripe customer portal for invoices and changes.