---
title: "Zuplo for Enterprise"
description:
  "One platform for API, AI Gateway, and MCP traffic — built for enterprise requirements. SOC 2 Type II, SSO/RBAC, audit logs, multi-cloud and self-hosted deployments, contractual SLAs, and the governance to scale without growing your platform team."
canonicalUrl: "https://zuplo.com/enterprise"
sourceUrl: "https://zuplo.com/enterprise"
pageType: "product"
generatedAt: "2026-11-10"
---

# Run enterprise APIs without the enterprise rollout.

> The unified gateway for APIs, AI, and MCP — with SOC 2, SSO/RBAC, audit logs, and dedicated deployments included.

Most enterprise customers are in production within weeks, not months.

## By the numbers

- **300+** — Edge locations worldwide
- **99.999%** — Enterprise uptime SLA
- **<50ms** — Edge latency
- **30 min** — Premium support response

## Same auth, RBAC, and SLAs for APIs, AI, and MCP

Apply the policies and governance you already enforce on your APIs to LLM traffic and agent tool calls. No fragmented stack to secure or budget for.

The platform illustration shows three layers — API Gateway (auth, rate limit, validation), AI Gateway (routing to OpenAI, Anthropic, Gemini; semantic cache, budget cap, guardrails), and MCP Gateway (OAuth 2.0, virtual servers, audit log) — under shared SSO/SAML, RBAC, observability, mTLS, SOC 2 Type II, and audit log.

### AI Gateway — Route LLM traffic, cap spend per team

Sit in front of every LLM call. Token budgets, semantic caching, per-team quotas, and audit logs for every model — OpenAI, Anthropic, Bedrock, custom.

- Cost predictability across providers
- Per-tenant quotas and budgets
- Failover and load-balancing between models

[Explore AI Gateway](/ai-gateway)

### MCP Gateway — Ship MCP to customers; govern the MCP your teams use

Centralize discovery, auth, and access controls for every MCP server your agents call — RBAC, virtual MCP servers, and segmented tool access.

- Approved-server registry for the org
- Per-role tool exposure with audit trail
- Block prompt-injection and tool abuse

[Explore MCP Gateway](/mcp-gateway)

### MCP Server — Your OpenAPI, as MCP tools

Auto-generate a compliant Model Context Protocol server from your OpenAPI spec. Same auth, rate limits, and observability as your APIs.

- No code — generated from OpenAPI
- Inherit existing API policies
- Ship safely to agents in minutes

[Explore MCP Server](/mcp-servers)

### API Management — Portal, keys, rate limits, GitOps

Auth, rate limits, validation, caching, and developer portals — managed via GitOps in TypeScript.

- Edge-deployed in 300+ locations
- Custom policies in TypeScript, not XML
- Self-service developer portal included

[Explore API Management](/api-management)

## Pass security review on the first round

SOC 2 Type II · SAML SSO · RBAC · Audit logs · DPAs & BAAs available

Everything your security, legal, and procurement teams need — shipped as part of the platform, documented, and ready to share under NDA.

- **SOC 2 Type II** — Independently audited security controls.
- **SAML SSO** — Okta, Azure AD, Google Workspace.
- **RBAC** — Role-based access for every workspace.
- **Audit logs** — Every config change, every action.
- **Data residency** — Region pinning across AWS, Azure, GCP.
- **Pen test on request** — Third-party report available under NDA.
- **Custom DPAs & BAAs** — Redlines welcome. Legal won't block you.
- **99.999% uptime SLA** — Contractual guarantees, not aspirations.

[Visit the Trust Center](https://trust.zuplo.com) · [Request a security audit](/schedule-call?utm_content=enterprise-meeting)

## Edge, dedicated, or your cluster — same platform

Move between deployment surfaces as your compliance, performance, and sovereignty needs evolve. Your policies, API keys, and dashboards travel with the project.

### Managed Edge (Fastest to value)

Serverless on 300+ data centers worldwide. Push to git, live in under a minute.

- Zero infrastructure to run
- Sub-50ms latency, globally
- Auto-scales through every spike

[Edge deployment](/api-management)

### Managed Dedicated (Most popular for enterprise)

Single-tenant Zuplo on the cloud of your choice — Akamai, AWS, Azure, GCP, or Equinix. Operated by us.

- Isolated infrastructure, your cloud
- Region pinning for data residency
- Capacity & throughput commitments

[Dedicated deployments](/docs/articles/hosting-options)

### Self-Hosted (Full control)

Helm chart on any Kubernetes cluster — EKS, AKS, GKE, OpenShift, on-prem. Hybrid or fully air-gapped.

- Your cluster, your data plane
- Same policies, managed from one place
- Designed for the strictest compliance

[Self-hosted topology](/docs/articles/hosting-options)

## Build your Enterprise plan

Pick the add-ons your team needs. A Solutions Architect will put together a custom quote tailored to your usage.

- **Logging Plugins** — DataDog, Loki, AWS CloudWatch, and more.
- **Observability** — OpenTelemetry traces for every API stage.
- **SSO + RBAC** — Enterprise identity with role-based access.
- **Private Connectivity** — Secure tunneling, mTLS, and VPC peering.
- **Extended Retention** — Longer analytics, log, and trace history windows.
- **Enterprise Support** — Up to 30-minute response time SLA.
- **Managed Dedicated** — Zuplo deployed to your cloud of choice on dedicated infrastructure.
- **Self-Hosted** — Run Zuplo on your own infrastructure with full control.
- **Audit Logs** — Full audit trail of every management operation on your gateway.
- **WebSockets & SSE** — Real-time communication with WebSocket and Server-Sent Events.
- **SOC 2 Type II** — Independently audited security controls for your compliance review.
- **Penetration Test Report** — Third-party penetration test results available under NDA.
- **API Governance with Claude** — AI-powered governance to enforce consistency across endpoints.
- **24/7/365 Emergency Hotline** — Round-the-clock phone support for critical production incidents.

**Your price: Custom.** Quoted on a call, on an annual contract. Your request volume, SLA and add-ons set the price, so we quote it with you. Quote turnaround usually under 24 hours.

[Talk to a Solutions Architect](/schedule-call?utm_content=enterprise-addons)

## Trusted by engineering teams at scale

- [**90%** — Hardware footprint reduction at scale (Blockdaemon)](/customers/blockdaemon)
- [**1B+** — End users served via Zuplo APIs (AccuWeather)](/customers/accuweather)
- [**Hours** — To launch MCP server on regulated APIs (Finsolutia)](/customers/finsolutia)

> The move to Zuplo from our existing API Management vendor was easy, taking just over 2 months to switch mission critical systems, and we're saving over 70% on costs.
>
> — Ryan Waites, Senior Director, Blockdaemon ([Case study](/customers/blockdaemon))

> Zuplo gives us the flexibility to scale efficiently, ensures security and compliance, and reduces operational complexity so we can focus on building new capabilities.
>
> — Daryl Benzel, Staff Software Engineer, Yext ([Case study](/customers/yext))

> We didn't touch a line of code, it's just plug and play. The results were very surprising, in just a couple of hours we had a great result and a fully working MCP Server.
>
> — Miguel Madeira, CTO & Co-Founder, Finsolutia ([Case study](/customers/finsolutia))

## Switching from Kong, Apigee, or AWS API Gateway?

Most teams cut gateway spend by 40–70% in the first quarter. Here's what changes.

### Zuplo vs Kong

- Typical pain: Self-managed control plane; plugins in Lua, hard to share across teams; manual scaling and cluster ops
- What Zuplo does: Fully managed — 60s to deploy; TypeScript-native policies in your repo; auto-scaled across 300+ edge locations

[See the full Kong comparison](/api-gateways/kong-alternative-zuplo)

### Zuplo vs Apigee

- Typical pain: XML & JSON-string policy config; long onboarding & GCP lock-in; per-seat developer pricing
- What Zuplo does: Code-first config in your IDE; free tier, deploy from GitHub in minutes; pay per request, not per seat

[See the full Apigee comparison](/api-gateways/apigee-alternative-zuplo)

### Zuplo vs AWS API Gateway

- Typical pain: Region-bound and AWS-only; plumbing required for auth, rate limit, portal; cost grows fast with custom integrations
- What Zuplo does: Edge-native, multi-cloud and on-prem; batteries included — auth, keys, portal, monetization; transparent usage pricing — no surprise egress

[See the full AWS API Gateway comparison](/api-gateways/aws-api-gateway-alternative-zuplo)

## Enterprise FAQ

The questions security, legal, and procurement teams ask before signing.

### Is Zuplo SOC 2 compliant?

Yes. Zuplo is SOC 2 Type II audited. Our latest report is available under NDA — your team can request it from your Solutions Architect during evaluation, along with our penetration test results and HIPAA / BAA documentation.

### Can Zuplo run inside our cloud account or data center?

Three options. (1) Managed Edge — serverless on 300+ data centers worldwide. (2) Managed Dedicated — single-tenant Zuplo that we operate on Akamai, AWS, Azure, GCP, or Equinix, with region pinning for data residency. (3) Self-Hosted — Helm chart on any Kubernetes cluster (EKS, AKS, GKE, OpenShift, on-prem), in either Hybrid or fully air-gapped modes. The same policies, dashboards, and analytics work across all three.

### How does Zuplo handle SSO, RBAC and provisioning?

Enterprise plans include SAML SSO with Okta, Azure AD, Google Workspace, and any SAML 2.0 IdP. Role-based access is enforced per workspace, with custom roles available on request. SCIM provisioning is on the roadmap; in the meantime, JIT provisioning is supported on first SSO login.

### What does the migration from our legacy gateway look like?

Most teams are in production within weeks, not months. We map your existing policies (Apigee XML, Kong plugins, AWS API Gateway, Azure APIM) to Zuplo's TypeScript policy model, run side-by-side traffic during cutover, and your Solutions Architect owns the migration plan end-to-end. [AccuWeather](/customers/accuweather) migrated 1B+ users from Apigee. Blockdaemon switched in just over two months and saved 70%+ on costs.

### How is enterprise pricing structured?

Enterprise is an annual contract, quoted on a call to fit your usage, with volume-based discounts. Pricing is based on requests/month, selected add-ons (SSO/RBAC, dedicated infrastructure, premium support, etc.), and your SLA tier. No per-seat fees. A Solutions Architect will put together a custom quote — typical turnaround is under 24 hours.

### Who do we talk to during procurement and security review?

Every enterprise customer gets a named Solutions Architect for evaluation, an Account Executive for commercial, and a Customer Success Manager post-signature. We handle custom contracts, redlines, DPAs, BAAs, and security questionnaires (SIG, CAIQ, custom). For Premium support, you also get a 24/7/365 emergency hotline and a 30-minute response SLA on critical incidents.

### How does Zuplo support governance across many teams?

Centralized policy enforcement — define auth, rate limits, logging, and validation once, and apply them across every team and project. OpenAPI specs are linted in CI; AI-assisted governance can flag endpoints deploying without authentication. Audit logs capture every management operation, exportable to your SIEM of choice.

### Does the enterprise plan cover AI Gateway, MCP Gateway, and MCP servers?

Yes — all of it. API Management, AI Gateway, MCP Gateway, and the auto-generated MCP Server capability are included in every Zuplo plan, including Enterprise. Same auth, same RBAC, same audit logs across all of them. You apply the same governance to LLM traffic and MCP agent tool calls that you apply to your APIs, and pay only for traffic you actually send.

### What observability tools does Zuplo integrate with?

OpenTelemetry traces for every request stage, plus first-class logging plugins for Datadog, Splunk, New Relic, Loki, AWS CloudWatch, and Azure Monitor. Real-time event feeds, exportable analytics, and a full audit trail are part of every Enterprise plan.

## Next steps

- [Book a meeting](/schedule-call?utm_content=enterprise-final-cta) — book a working session with a Solutions Architect
- [Start for free](https://portal.zuplo.com/signup)
- [Visit the Trust Center](https://trust.zuplo.com)