The same MeshHold — with a contract.
The Community Edition you've already downloaded is the same engine. The Business tier adds what procurement actually needs to sign: multi-user identity, RBAC, audit log, OIDC / Active Directory, fleet management, and a real support contract with named contacts and a response-time SLA.
When the open-source build stops being enough.
Most teams ship MeshHold Community as-is. The Business tier exists for the moment someone in legal or security says "we can't deploy this without…"
Multi-user inside one node
Individual user accounts, sessions, per-user audit trail. Replaces the single shared Bearer token of the Community build.
OIDC, SAML, LDAP / Active Directory
Single sign-on against the IdP you already run. AD-group membership maps to vault permissions automatically.
Role-based permissions per vault
Admin / member / viewer. Plus per-vault sharing policies and a join-by-invitation flow that procurement can actually audit.
Tamper-evident audit log
Append-only, hash-chained log of all administrative and data-access events. Exportable to your SIEM (Splunk, Loki, Elastic).
Fleet management dashboard
One admin UI controls N nodes across your organization. Push config changes, rotate keys, monitor RF, get alerts before disks fill.
Prometheus exporter & Grafana dashboards
Per-node bytes / RF / peer-count / call-quality metrics. Reference dashboards included. Alertmanager-ready.
Scheduled backup & point-in-time restore
Push vault snapshots to S3 / B2 / your offsite storage. Restore a vault to its state at 14:32 last Thursday in one command.
MSA, DPA, SLA, named support
Signed contract from a Serbian DOO that can invoice EU, US, UK, and CIS entities. Response-time SLA. Named technical contact.
Get early access — and shape what ships.
We're previewing the Business tier with 10–15 design partners through Q3–Q4 2026. Partners get private builds, weekly office hours, and significant influence on the feature set in exchange for honest feedback.