Why most engineering orgs need this
If your developers use coding assistants and LLM APIs today, you already have four problems whether you know it or not.You don't know what's leaving your network
Developers paste source code, database schemas, and internal infrastructure details into ChatGPT, Claude, and Gemini every day. Without a capture and visibility layer, you find out about leaks after the fact — if at all.
You don't know what it's costing you
A misconfigured agent running overnight or a developer sending huge context on every request can create real spend risk. Most teams lack usage breakdowns by developer, team, model, or project until the invoice arrives.
You have no observability into how AI is being used
Which models are your developers using? Are some teams heavy users while others barely touch AI? Is AI improving output quality? Without data, these are guesses — and improving them is impossible.
You have no audit trail
For regulated industries or incident response, answering “what did our developers share with external AI providers over the past 90 days?” requires a capture layer. Without one, the question is simply unanswerable.
What the enterprise tier includes
Enterprise builds on top of the full Paid feature set and adds an organizational layer that admins control without touching individual developer workflows.Org-wide usage dashboard
See usage broken down by developer, team, model, and project. Cross-developer analytics refresh every 15 minutes and drill down to the exact session behind any metric spike.
Enterprise LLM Gateway
Hosted at
proxy.reclaimllm.com — not local rclm-proxy. Admins store provider credentials once. Teams receive scoped rclm-gw-… keys. Provider secrets never reach developer machines, and every gateway call is logged with full org and team attribution.Role-based access control
Three roles — admin, team lead, and developer — determine who can see what across the organization. Admins manage members and teams; team leads see their teams; developers see their own sessions.
Org-wide session encryption
Enable encrypted raw session storage at the org level with a single org recovery key. Admins control which roles can open encrypted member session details; summaries and search metadata stay usable without decrypting every transcript.
DLP scanning + policy enforcement
Flag sensitive content, apply retention rules, and create a governance layer around real AI usage. Org-wide policy enforcement keeps data-risk controls consistent across every developer capture path.
Coverage & tamper alerts
See which machines still have hooks and DLP, alert on removal or gateway bypass, and measure org/team coverage % from device check-ins — without MDM.
Session sharing & governance
Control whether sessions are visible org-wide or team-only, set data retention and legal hold, and normalize project names across the org — all from the Settings tab.
How the org layer works
When a developer joins your organization, their sessions are tagged server-side with durable org and team attribution. You don’t need to change their local capture tools.- Historical backfill — existing sessions can be attributed to your org when a developer joins, so the enterprise view covers past and future activity from day one.
- Team assignment — admins assign developers to teams, and attribution flows automatically from that point forward.
- Non-disruptive rollout — enabling the enterprise layer does not change individual developer capture tools. Everything each developer already has set up continues to work as before.
The enterprise tier requires an organization account. Individual Paid accounts can be upgraded — contact [email protected] to start the process.
Pricing
Enterprise starts at $10/seat/month, with your first 3 months completely free — no credit card charge until day 91. Cancel before day 91 and you won’t be billed. For larger teams, volume pricing and annual billing are available. Contact us for a custom quote.What’s coming soon
The current enterprise release focuses on observability, the LLM gateway, role-based access, encrypted session storage, DLP, and org-scoped API keys. The following are in active development:Cost attribution + budget alerts
Cost attribution + budget alerts
Break spend down by team, developer, and project. Set budget thresholds and receive alerts before spend exceeds them.
Sensitive data alerts
Sensitive data alerts
Route alerts for sensitive-content detections to Slack, PagerDuty, or a webhook of your choice so security teams can respond immediately.
SIEM integration
SIEM integration
Forward structured event data via webhook or syslog into your existing security information and event management stack.
Audit log
Audit log
A tamper-evident log of every admin action with actor and timestamp, scoped to your organization.
Data retention + legal hold
Data retention + legal hold
Configure configurable delete policies and place sessions or date ranges under legal hold without changing day-to-day capture workflows.
SSO (SAML/OIDC)
SSO (SAML/OIDC)
SSO configuration storage is available now. Enforced SSO login and SCIM provisioning are in progress.
On-premises deployment
On-premises deployment
Run RCLM entirely inside your VPC. Docker-based self-hosting is available today; a fully packaged Helm chart is coming soon.
Get started
1
Start your free trial
Go to reclaimllm.com/pricing and click Try free for 3 months under the Enterprise column. No credit card required until day 91.
2
Create your organization
After signing up, create an org from the enterprise portal and set your org slug. Your slug becomes part of the LLM gateway URL.
3
Invite your team
Add developers by email, assign roles, and organize them into teams. Existing sessions can be backfilled to cover prior activity.
4
Configure your governance layer
Set up the LLM gateway, enable org-wide session encryption, and configure retention policy and session sharing.
Explore the enterprise features
LLM Gateway
Set up governed API access for your teams.
Observability
Understand usage, cost, and data risk across your org.
Coverage Alerts
Hook integrity, DLP posture, and silent-device detection.
Roles & Access
Manage members, teams, and permissions.