Casola Enterprise
Live avatar infrastructure for enterprise teams.
Cloudflare's global edge handles the infrastructure. Data agreements, custom SLAs, and priority support are available under an enterprise agreement.
Why teams build on Casola
-
Infrastructure you don't manage
Every session routes through Cloudflare's global network. Managed GPU capacity handles the API layer; no servers to provision, no capacity to reserve.
-
Data controls that hold up in review
Encryption in transit and at rest. No model training or tuning on your inputs, outputs, or recordings, and session capture is off unless you switch it on. Scoped, short-lived credentials with RBAC and access logging.
-
Support that scales with you
Priority and dedicated support channels, with a custom SLA when the standard terms fall short. Both available under an enterprise agreement.
Security and data practices
Every claim here traces to a legal document. Nothing implied, nothing approximated.
- Encryption in transit and at rest
- No model training or tuning on your inputs, outputs, or recordings, and we never sell your data
- Session capture off by default, per-session opt-in, deleted after 30 days
- Scoped, short-lived API credentials with RBAC and access logging
- 72-hour breach notification to affected customers
- Once-yearly audit rights and access to third-party reports
- Data return or deletion within 30 days of contract end
- International transfers via SCCs and UK IDTA
- Subprocessors published, with 30 days' notice before any change
Enterprise agreements
Standard terms cover the baseline. Enterprise agreements cover the rest.
- Available under an enterprise agreement
Volume pricing
Custom rates at the scale you're actually running, on an order form you agreed to.
-
Priority & dedicated support
Named contacts and written response SLAs, outside the general support queue.
-
Custom SLA
Written uptime commitments that override the standard Terms' no-warranty clause.
-
Data residency
Region pinning when your compliance posture requires it, EU-only processing for example.
Questions procurement always asks
Where is data processed and stored?
On Cloudflare's global network. Our DPA — available on request — names all subprocessors and the specific regions each can use.
Do you train AI models on our data?
No. Casola does not train or tune any model on your inputs, outputs, or session recordings, and no third-party foundation model sees them. Session capture is off by default; if you switch it on, those recordings are kept for your debugging and support only, never for our model work. That applies at every tier.
Can we sign a DPA?
Yes. Use the form below and we'll return a signed copy within one business day.
Who are your subprocessors?
Published at casola.ai/subprocessors, with what each one does and where. The same list is Annex C of our DPA. We give 30 days' notice before adding or replacing one.
How are API credentials handled?
Scoped, short-lived tokens with RBAC. All credential use is logged. No shared secrets.
Do you offer an SLA?
Standard Terms disclaim uptime guarantees. Written SLAs are available under an enterprise agreement.
How does volume pricing work?
Tell us your expected usage via the form below. We'll put custom rates in writing.
How do you handle a security breach?
We notify affected customers within 72 hours of confirming a breach. Report vulnerabilities to security@casola.ai.
Let's talk
Building something big with avatars or video? Tell us about your use case and we'll help you scale.