Shared or dedicated
Start on our managed platform, or have your own instance, with your data where you need it.
Shared tenant
Your organisation’s workspace on our managed platform: the quickest way to start, with nothing to install.
- Your data kept apart from every other workspace
- Updates as soon as they ship
- Encrypted in transit and at rest
Dedicated tenant
Your own instance of Twiggy and its own database, run by us, in the region you choose.
- Nothing shared with other customers
- Data residency, for example in Australia
- Your own encryption keys
- Update windows that suit you
Security and governance
What is in place today, what we set up on request, and what is on the way. How we protect every customer, and how to get our security pack, is on the security page.
Single sign-on
Sign in through your identity provider with OpenID Connect (Microsoft Entra ID, Okta, Google Workspace), on domains you prove you own, optionally required for everyone at them. New people join the workspace you choose. SAML on request.
Two-step sign-in
A code from an authenticator app (Microsoft or Google Authenticator, 1Password) on top of the email link; required for everyone in the workspace if you choose.
IP allow-listing
Only let people in from your offices and VPN.
Encryption in transit and at rest
Every connection uses HTTPS, and our database and hosting providers encrypt stored data.
Bring your own key
Models encrypted with a key held in your own key service (AWS KMS, Azure Key Vault or Google Cloud KMS). Revoke the key and the data can no longer be read.
Data residency
Choose where a dedicated tenant and its backups are stored.
Retention and deletion
Agree how long data is kept, and have a workspace deleted with its backups on request.
Roles and permissions
Separate who can view, edit and send models for sign-off, by team or folder.
A record of who agreed what
Every sign-off keeps who approved which version and when, with their comments, and every AI change is kept with the conversation that made it.
AI that doesn’t learn from you
Twiggy uses Anthropic’s Claude through its commercial API: your models are not used to train AI models, and are sent only while the AI is working on them.
Your keys, and the AI
How encryption with your own key will work, and where its limits are.
Your key wraps ours
Each workspace’s data is encrypted with its own data key, and that key is itself encrypted with your master key, which never leaves your key service. You can rotate it, audit its use, or revoke it.
Protected at rest
Stored models, interviews and sign-offs, and their backups, can be read only while your key allows it. Revoking the key locks the workspace for everyone, including us.
Open only while in use
To draw, check or interview, a model has to be readable while you work on it, and the AI sees the part it is working on. The AI service does not train on it, and keeps it only for the limited time its commercial terms allow.
For personal plans, encryption with your own key is also on the way. Tell us if it matters to you: it helps us decide what comes first.
What a corporate plan includes
Dedicated support: a named contact and agreed hours
Success package: coaching and process modelling guidance for your team
Onboarding: your process map set up with you
Everyone modelling in one catalogue; SMEs sign off free
Monthly or annual invoicing in AUD
Security questionnaires answered
Priced around your hosting, modellers and support. Let's talk.
Talk to sales
Tell us about your organisation, how you want it hosted, and what your security team needs. We’ll reply with options and a quote.