One system for an organisation of hundreds.
Every app on one set of records, under one permission model and one audit log, with the identity controls and contract terms a larger organisation expects.
- For
- 200 people or more
- Terms
- 12, 24 or 36 months
- Support
- A named solutions engineer

For organisations that would rather run on one system than reconcile five.
Several teams, more than one office, and someone who has to answer for who changed what. It’s the same platform as every other plan, with terms and support shaped around you.
One set of rules for people and agents.
Ask Cyril and our support team act as a person, under that person’s permissions. Every Ask Cyril run is recorded with its plan and who approved it, and the audit log shows who changed what.
| Time | Who | What changed | App | Note |
|---|---|---|---|---|
| CDClaire DonovanAdmin | Added an allow rule for the office network | Settings | ||
| CDClaire DonovanAdmin | Changed Nina Whitfield’s role to Member | Settings | ||
| OROwen ReedMember | Updated draft invoice ROWA-1001, 59,085.00 | Finance | ||
| NWNina WhitfieldMicrosoft Entra | Signed in with Microsoft Entra | Sign-in | ||
| Microsoft EntraDirectory sync | Added Marcus Bell to the Delivery team | People | From Entra | |
| Cyril supportSupport session 2041 | Started a support session | Settings |
- Agents never outrank people
- Ask Cyril works inside the permissions of the person who asked. It shows its plan and waits for approval, and each step is checked against those permissions on the server before it runs.
- One log for every app
- Sign-ins, settings, roles and record changes land in one audit log with who made them. Our support team’s actions carry their support session.
- A recycle bin
- Deleted customer records go to a recycle bin. Someone allowed to restore them can bring them back, and the restore is logged too.
Sign-in that follows your directory.
Connect Microsoft Entra and people sign in with their work account. Add someone to a group and they get the right role; disable them and they’re out of Cyril within minutes.
Each line says what works today. Where something isn’t built, we say so.
- Sign in with Microsoft Entra IDSingle sign-on with your existing work accounts.
- Available
- Automatic provisioning and removalEntra creates, updates and disables people in Cyril through SCIM.
- Available
- Groups mapped to roles and teamsRe-applied at every sign-in, and checked daily for drift.
- Available
- Entra’s multi-factor countsNo second prompt when Entra has already checked.
- Available
- Multi-factor for everyoneAdmins can require an authenticator app across the organisation.
- Available
- Custom rolesOwner, Admin, Member and Viewer to start, plus roles you define with view, create, edit and delete set per app.
- Available
- Google WorkspaceIn beta while Google’s security review completes.
- Not yet
- Restrict sign-in by IP addressAllow or block address ranges, zone by zone.
- Available
- Okta, OneLogin and other SAML or OIDC providersGeneric SAML and OIDC. Not yet tested with Okta or OneLogin.
- Available
Where your data lives, and how it leaves.
Your records stay in the EU. Exporting them costs nothing, and the core apps leave as one zip.
- Stored in the EUThe database and API run in data centres in Lithuania and the Netherlands. It is the primary residence, not a region you choose, and there is no Australian region today.
- External AI can be switched offAn admin can turn off external model processing for the whole organisation. The call is refused before anything is sent.
- Or kept off the public internetA route to self-hosted inference, with no public fallback, is built. It needs capacity set up for you, so ask us first.
Where we stand today.
Cyril is pre-launch. Here is what is in progress, what is still a draft and what is agreed per order, so it doesn’t surface halfway through a review. The detail is in the trust centre.
| Item | Status | What that means |
|---|---|---|
| SOC 2 Type 1 | Preparing | We are preparing for the first audit. We hold no certification today and no report is available. |
| GDPR | In progress | Built for GDPR: access, export, correction and erasure requests are handled in the product. Our data processing agreement will be ready before customers sign. |
| Data processing agreement | Draft | Readable now, pending counsel review. If you need a signed DPA, ask and we’ll confirm timing. |
| Service levels | In your order | None apply by default. Uptime and response commitments are agreed in an Enterprise order. |
| Country-specific invoicing rules | Planned | Tax registrations and e-invoicing rules applied by the country you trade in. |
Terms that fit how you buy.
The same platform as every plan, priced for your size and fixed for the length of your contract.
Discounted pricing is available for verified nonprofits and educational institutions.
- Contract term
- 12, 24 or 36 monthsYour price is locked for the term. Platform increases never apply mid-contract.
- Billing
- Annual or monthly
- Apps
- Every app, for every seatNo add-ons and no platform fee.
- AI
- A negotiated pooled AI credit allowance
- Support
- A dedicated solutions engineerPriority support, with service levels agreed in your order.
- Growing mid-term
- New seats are pro-rated at your contracted rate
- Client portal
- Unlimited portal users, free
- Leaving
- Data export, free, at any time

Moving a large organisation in.
Your solutions engineer plans the move with you, and you can test everything before anyone changes how they work.
- Map what you run todayWhich tools, which records, and what has to move first.
- Try it in a sandboxA separate organisation for testing imports and integrations, isolated from your live data.
- Bring your records acrossImporters for Salesforce and Pipedrive, HubSpot in beta, and CSV for everything else.
- Switch on sign-inConnect Entra, map groups to roles, and let provisioning add your people.
- Roll out team by teamStart where the pain is, and widen once it’s working.
More on switching to Cyril.
Talk to us about your organisation.
Tell us how many people, which tools you run today and what has to be true before you switch. A person reads every message.
