Enterprise

Designed, not built, not priced. This page describes the design. What it includes and what it costs will be published on the pricing page when decided.

The words first

Upstream keeps part of its code under a separate licence, in directories named ee, and calls that its enterprise edition. Keyward Enterprise is not that. Keyward does not copy, enable or work around any of upstream's enterprise code, and excludes those paths from every release artifact. Keyward Enterprise is Keyward's own server tier: the features below, built by Exprezoe on the MIT core and Keyward's own code, and operated on Exprezoe's servers. See Keyward Server.

Enrolment

A person enrols a computer with a Keyward server from Keyward Desktop. The computer gets a machine identity the server issued; from then on it connects to the server, outbound, and the server never connects to it. Enrolment is a choice, and so is what follows it: nothing is mirrored until a project is chosen.

Mirrored projects

For each project you choose, the vault on the computer keeps a mirror. The server is authoritative: a change on the server reaches the computer at the next connection, and a secret written on the computer is pushed to the server, under the policy. The computer works when it is offline; a computer offline for a week reconciles with no loss and serves no stale secret after a rotation. A revocation on the server empties the mirror at the next connection.

Central audit and policy

The audit trail of every enrolled computer is shipped to the server, where it is kept and searched; the policy for callers can be set centrally and pushed. A computer that falls out of policy is told so, and its mirror is withheld until it complies.

The connector and the relay

The Keyward Connector, the remote MCP behind OAuth 2.1 through Exprezoe Identity, is part of Enterprise: it is how claude.ai, ChatGPT, Claude Desktop and Codex reach a Keyward server from anywhere. The relay lets those clients reach a vault on an enrolled computer through the server, over the computer's own outbound connection, with the same policy and the same prompts as a local caller. See AI sessions.

People

Staff sign in with Exprezoe Identity, with a second factor, and reach the projects their groups allow. The same provider signs them in to this site and to the programs.

What Enterprise does not do

It does not reveal values to a remote model in its first release, it does not open a port on any computer, and it does not change what the Desktop does for a computer that is not enrolled: everything on that computer stays local.