For enterprises

The Enterprise plan

Everything in every other plan, bought the way a large organisation buys:

• The same product. Enterprise does not add machine classes, reserved capacity, custom retention or regions: every plan runs in one AWS region, us-east-1, on a shared fleet, and keeps logs and artifacts for 90 days.
• Procurement that fits yours. Invoicing, a signed agreement, security questionnaires answered, and a named contact.

Security posture

Short-lived credentials through OIDC, protected environments with required reviewers, and secrets that are never written to a log. GITHUB_TOKEN is minted for each job, for its own repository only, and narrowed by permissions: as on GitHub. The security feature page has the detail, and the security page explains how we handle disclosure.

Migration without a project

There is no migration project. The GitHub App is installed on the organisations you choose, with the repositories you choose, and every other repository stays where it is. Moving a repository means adding its secrets to Apex and disabling GitHub Actions on it. Roll out one team at a time; roll back by uninstalling the App and re-enabling Actions.