Enterprise readiness

Cassidy gives IT and operations teams full control over deployment, access, and AI governance. Here’s what’s available out of the box.

​

Single Sign-On

Cassidy supports SAML 2.0 SSO with any compatible identity provider, including Okta and Microsoft Entra ID. Your team signs in with existing credentials. SAML role mappings can grant privileges automatically, and SAML group mappings can place users into the right resource visibility groups.

​

Roles and privileges

Managed roles and custom roles give you fine-grained control over what each person can do in Cassidy. Use roles to control privileges like creating Agents, editing Workflows, adding to the Knowledge Base, recording meetings, inviting members, managing billing, or configuring SSO. Use groups to control which shared resources each team can access.

​

Knowledge Base access controls

Knowledge Base content is organized into collections, each with its own access settings. Collections can be open to the whole organization, restricted to specific groups or individuals, or kept private. Sensitive content can live in Cassidy without being accessible to everyone.

​

Knowledge verification

Admins can flag Knowledge Base documents as potentially outdated and require them to be reviewed before Agents continue using them. This gives teams a lightweight governance layer to ensure the information powering your Agents stays accurate and current.

​

Agent and Workflow controls

Agents and Workflows can be shared with specific groups, kept private, or made available to the whole organization. Both can be organized into folders with their own permission settings. Workflows support external deployment via webhooks and inbound email triggers for integration into other systems. Agents support draft and publish versioning with full version history, so changes can be reviewed before they go live.

​

Meeting access controls

Meeting recordings default to private and can be shared with specific people, groups, or the whole organization. Admins can set up automated sharing rules that apply access settings based on defined conditions, so the right teams always have access without manual sharing.

​

Data retention

Enterprise customers can configure automated retention policies for Workflow run history. Set a custom retention window to automatically purge run data after a defined period, or retain it indefinitely. Manual deletion is always available. All data is permanently deleted when an account is closed.

​

Global AI governance

Admins can set organization-wide instructions that apply to every Agent and Workflow across the organization. Use this to enforce tone, restrict certain language, add compliance disclaimers, or ensure consistent behavior regardless of how individual Agents are configured.

​

Default Agent configuration

Admins control which Agents appear by default for team members when they open a new chat. This ensures new users land in the right context without needing to hunt for the right Agent.

​

Observability and AI usage monitoring

The usage dashboard surfaces credit consumption by user, Workflow run volumes, Knowledge Base storage, and meeting hours. Workflow run history logs every execution with inputs, outputs, and step-level results for auditing and debugging. Per-user credit limits and alert thresholds give admins proactive control over spend.

​

Audit logs

Enterprise admins can review a searchable record of who viewed or changed resources in the organization. Audit logs track activity across Agents, Workflows, Knowledge Base content, meetings, sharing, etc.

​

Secret management

API keys, passwords, and other sensitive credentials used in Workflows are stored as encrypted secret keys rather than plain text values. Secrets can be scoped to specific users or groups so only authorized team members can use them in Workflow actions. Once saved, secret values are never exposed in the Workflow editor or run history.

​

Custom integrations and extensibility

Cassidy integrates natively with most enterprise tools. For everything else, Workflows can send API requests to any external system, accept webhook and email triggers from any source, run custom code for advanced logic, and Agents can reach internal systems through Custom Connectors. Most integrations are point-and-click. The edge cases are covered by code.

​

Custom Connectors and built-in Connectors

Custom Connectors connect Cassidy to internal systems through MCP. People with the Manage Connectors privilege add them, choose who can use them, and can disable one for the whole organization without deleting it. Cassidy also provides built-in Connectors for HubSpot, Salesforce, Airtable, Snowflake, BigQuery, ServiceNow, and other business apps. Roles decide which built-in Connectors people may use. Organization settings can turn off individual actions, decide what happens to new actions, and require approval for changes or for every action. People connect their own accounts, so each person keeps their own permissions in the external app. Agents and Workflows can instead use a shared connection limited to selected people, groups, or the organization.

​

Native OAuth integrations

All native integrations connect through standard OAuth or API key authentication. Cassidy only requests the scopes needed for each integration, and credentials are encrypted and stored separately from content data. Users connect their own accounts through the standard OAuth flow. For shared service accounts, anyone with the privilege to connect that integration can set up a shared connection and choose who may use it.

​

Multi-organization support

Cassidy supports multiple separate organizations under the same login, useful for companies managing multiple divisions, brands, or client environments that require strict data separation.

​

Deploy Cassidy wherever your team works

Agents can be deployed wherever your team already works: Slack, Microsoft Teams, Outlook, Word, Excel, Chrome, Edge, email, embedded in any website, or accessed via API. All deployment surfaces operate under the same security model as the main platform.

---

For questions about enterprise deployment, contact support@cassidyai.com or visit trust.cassidyai.com.