SSO and directory sync
SAML and OIDC against the identity provider you already run. Groups map to workspace roles.
Open-source · self-hosted · Grengin Cloud · multi-model
AI superpowers for your team, with enterprise-grade governance built in.
A multi-model conversational AI platform, deployed your way — AWS Marketplace image into your own cloud, or fully managed on Grengin Cloud.
<5 min Deploy time
12+ AI models
$0 Software cost
The Problem
Team AI with enterprise governance: free for teams of 10 or fewer, no minimums, no markup on AI
ChatGPT Enterprise is expensive
Requires 150-seat minimums (~$9,000/month)
Microsoft Copilot assumes you're a Microsoft shop
Not ideal for Google Workspace users
Free AI tools mean your data goes... somewhere
No control over training or privacy
DIY solutions like LibreChat require DevOps
Expertise you probably don't have in-house
The Solution
Your enterprise AI platform, deployed in minutes
Get everything your team needs to leverage AI safely and productively—without the complexity of enterprise solutions or the risk of ungoverned consumer tools.
- Branded AI chat instance for your entire team
- User management with SSO integration
- Choice of AI models (OpenAI, Anthropic, open-source)
- Real-time cost tracking and budget controls
- Admin dashboard with usage analytics
How to run
Self-host, Grengin Cloud, or a dedicated Enterprise deployment
Same software on every path. You choose how much of it we operate for you.
| Question | Self-host | Grengin Cloud (Starter and Pro) | Enterprise |
|---|---|---|---|
| Where does the app run | In your AWS account, in the region you pick. | In our AWS account, on shared infrastructure, in the region you pick. | Dedicated. Isolated in our cloud, or inside your own cloud account, on any provider. |
| Is Grengin in the data path The real trade | No. Requests go directly to your AI providers without passing through Grengin. | Yes. We operate the app, so your traffic passes through it. | In our cloud, yes. In your account, no: the app runs in your tenant and requests go straight to your providers. We operate it through an access role you grant and can revoke. |
| Where are model keys | In your tenant. You hold them; we never see them. | Stored encrypted in our vault. Still your keys, still your provider bill. | In your tenant for in-account deployments, in our vault for hosted ones. Always your keys, always your bill. |
| What it costs | Free. You pay your cloud and your model providers, nothing to us. | Free for up to 10 users. Past 10, every active user is $1.25 per month. Plus your model providers, never marked up. | From $500 per month, billed quarterly, for a managed dedicated deployment; larger deployments are quoted on users and requirements. Plus your model providers, never marked up. |
| Who patches it | You do, when you pull a new image. Old versions keep working. | We do, continuously. You are always on the current release. | We do, in maintenance windows you agree to. |
| Support | Community. | Community on Starter, email on Pro. | Dedicated contact with an SLA. |
| Audit log retention | Your storage, your rules. | 30 days on Starter, one year on Pro. | Custom. |
| Proof of no lock-in | Same image, same schema, same export as Cloud. Read the source. | One-click export into your own cloud. Your data comes with you. | Same image, same schema. In-account deployments are already in your cloud. |
| Deploy on AWS | Start free on Grengin Cloud | Talk to us |
Open source
Fully open source under the Apache License 2.0: inspect every line, own every byte
The web app and API are public on GitHub—read the code, self-host, and verify there is no hidden behavior. See our privacy policy for how we treat data.
Featured on 
Governance
The controls IT asks for, on every path
Audit logs you can export
Every prompt, model call and admin action, written to a table you can query or ship to your SIEM.
PII detection and redaction
Flag or strip sensitive strings before a prompt leaves the workspace. The rules are yours to edit.
Budgets and cost controls
Per-workspace caps and spend reporting against your own provider bill. No markup, either way.
How It Works
Choose a path, set up, invite: live in minutes
Choose how to run
Marketplace image in your AWS account, or Grengin Cloud hosted by us.
Set up
Connect SSO, model keys, and budgets. Grengin Cloud is the faster launch.
Invite
Add your team over SSO and you're live. Governance, cost controls, and audit trails on from day one.
Partners
Connect Grengin to the cloud and AI providers your organization already trusts
FAQ
Common Questions About Grengin's Enterprise AI Platform
Pricing, security, features, and getting started—expand any question for the full answer.
Pricing
How much does Grengin cost?
Self-host from source or the AWS Marketplace image is free at any size under Apache License 2.0. Grengin Cloud is free for up to 10 users; past that, every active user is $1.25 per month. Enterprise is a dedicated deployment operated by us, in our cloud or your own cloud account on any provider, from $500 per month, billed quarterly. On every path, bring your own keys and pay model providers directly, without markup.
Are there per-seat fees, user minimums, or plans to choose?
No seat minimums. Self-host is free at any size. Cloud has Starter, free for up to 10 users, and Pro above that. On Pro, every active user is billed at $1.25 per month. Enterprise pays for a dedicated deployment operated to your requirements. Every plan includes the full product.
Whose model bill is it?
Yours, on both paths. You bring your own OpenAI, Anthropic or Google keys and pay those providers directly. We take no cut of model usage.
Do you mark up AI usage? Do I have to buy credits?
Never, and no. You bring your own API keys and pay each provider’s published rates directly. Grengin adds zero margin and sells no credits or token bundles, on every plan.
Security & your data
Where does our data live—and can Grengin see it?
When you self-host (from source or the Marketplace image), Grengin runs as a single-tenant deployment inside your own AWS account. Conversations stay in your tenant, and with your own keys prompts travel straight to your AI provider—Grengin is never in the data path. Grengin Cloud is the exception: we operate the app, so traffic passes through infrastructure we run.
Is our data used to train AI models?
No. Grengin's enterprise AI governance policy ensures your business data is never used to train AI models, and because you connect with your own API keys, your requests are covered by your direct agreements with each provider—agreements that exclude training on API traffic. The entire codebase is public on GitHub, so your security team can verify there's no hidden behavior.
How do we handle compliance—GDPR, data residency, audits?
Self-hosted Grengin runs inside your existing security boundary: your IAM, encryption keys, network controls, and cloud region. On Grengin Cloud you pick the region at setup. Either way you get exportable audit trails, PII detection, and open-source code auditors can inspect.
Features
Which AI models can my team use?
Providers include OpenAI, Anthropic (Claude), Google Gemini, Mistral, Groq, Cerebras, Amazon Bedrock, Azure, and Hugging Face in one governed platform, switchable per task. Your team always uses the best model for the job, under one set of governance policies, with your own keys.
What do admins actually control?
A full AI governance layer on both paths: SSO and directory sync, policies by department or project, real-time cost tracking with budget alerts and hard caps, PII detection and redaction, and complete audit trails.
Is the self-hosted version crippled?
No. There is no feature flag separating the two. Governance, SSO, audit logs and PII rules all ship in the Apache 2.0 repository.
What does Grengin integrate with?
Jira, Confluence, and Google Drive out of the box—plus anything that speaks MCP, the open standard for connecting AI to your tools. SSO works with your existing identity provider. And yes, we're fully at home in a Google Workspace shop.
Getting started & support
How long does deployment really take—do we need DevOps?
Grengin Cloud is the faster launch. Marketplace self-host takes about five minutes with no DevOps team required—launch the one-click image in your AWS account, add keys and SSO, invite your team. Engineers who want full control can build from source instead.
What do I need in order to self-host?
An AWS account and permission to launch an instance. The one-click image handles the rest: no Kubernetes, no DevOps project.
Can I start on Cloud and move into my own account later?
Yes. Export from Cloud, run the same image in your account, import. The schema is identical because the software is identical.
Can we try Grengin before committing?
Yes. Start free on Grengin Cloud: no card, no trial clock, free for as long as you have 10 or fewer users. Explore the interactive demo, or deploy the free Marketplace image and shut it down anytime. Self-hosting is free at any size.
Are we locked in?
No—by design. Same software on Cloud and self-host, with one-click export into your own cloud. Your conversations and provider keys stay yours. If you ever leave, nothing breaks.
What support is available?
Every path gets the documentation and the community. Pro workspaces get email support. Enterprise gets a named contact, an SLA and maintenance windows you agree to. Self-hosting and want someone to call? Support contracts for self-hosted deployments are available; talk to us.
Ready to give your team AI superpowers?
Start free on Grengin Cloud, deploy the marketplace image into your own AWS account, or talk to us about a dedicated deployment.