RedminePRO Enterprise is the tier for organizations that need contractual terms rather than a checkout page: a custom SLA, a signed DPA, guided onboarding, and custom plugin development. It is priced per engagement, and it starts with a conversation rather than a credit card.
The Business plan at $169/mo covers up to 250 users, unlimited projects, Gantt and portfolio planning, statistics and analytics, helpdesk, resource management, bring-your-own-plugins, priority support and a 99.9% uptime SLA. For most organizations that is the right plan, and we will tell you so. Enterprise is for the cases Business does not reach. Four things move:
Scale beyond 250 users. Business caps at 250. Enterprise is unlimited, and above that ceiling the sensible thing is a quote rather than a table.
Terms you negotiate rather than accept. A custom SLA and a custom DPA, reviewed by your legal team and ours, replacing the standard published terms.
Engineering work on your instance. Custom plugin development, scoped and built for your workflow, rather than only installing what already exists.
A guided start. Onboarding run by our team against your data and your process, instead of a signup form and a documentation link.
Everything in Business carries forward. Enterprise is additive, not a different product — it is the same Redmine, the same platform, and the same full administrator access.
Enterprise pricing is custom. We are not going to publish a starting figure, because the honest answer is that the number depends on seat count, region, infrastructure shape, the SLA you need and whether there is plugin development in scope, and any headline figure we printed would be wrong for most readers.
What we can tell you is how the conversation goes. You describe the shape of the deployment, we tell you what it costs and what it includes, in writing, before anything is signed. If the answer is that the Business plan at $169/mo already covers you, we will say that instead of quoting you something larger — a great many organizations that ask about Enterprise turn out to fit inside it. See the full plan comparison.
RedminePRO runs entirely on AWS. HAZERCLOUD is an AWS Advanced Tier Services Partner, and every plan — Startup through Enterprise — runs on the same managed platform, in the region you choose at signup. The question every enterprise buyer asks next is whether their instance shares infrastructure with other customers, and it is the right question to ask. Database isolation, compute isolation, network isolation and the blast radius of a noisy neighbor are separate questions with separate answers — a vendor that responds “dedicated” as a single word is not telling you anything. We scope the isolation model for your deployment in the enterprise conversation and write it into the quote rather than gesturing at it here.
What is true on every plan today, and is published on our security page: encryption at rest with AWS KMS using AES-256 on all databases and disk volumes, TLS 1.2+ in transit on all services and APIs, continuous encrypted backups with point-in-time recovery, and a region you choose at signup with your data resident in that region.
Enterprise deployments frequently need the instance to live on the customer's domain — projects.yourcompany.com rather than a RedminePRO subdomain. Three usual reasons, all legitimate:
That means a custom hostname, a certificate covering it, and a documented renewal path so nobody discovers the expiry from a browser warning on a Sunday. The mechanics — issuance, renewal ownership and whether it sits inside the tier or is priced separately — are confirmed in the enterprise conversation and written into your quote.
The Business plan carries a 99.9% uptime SLA. Our operating target across the platform is 99.99%. Those are two different things and we would rather be clear about which is which: 99.9% is what we commit to contractually on Business, and 99.99% is what we build and operate toward. Enterprise replaces the standard SLA with one negotiated for your deployment. The terms that typically move are the uptime commitment itself, the measurement window and how downtime is defined, support response targets by severity, escalation paths and named contacts, and the remedy when a target is missed. If your procurement process has a template SLA, send it — reviewing yours is usually faster than defending ours.
The DPA is the other half. Enterprise includes a custom data processing agreement rather than the standard published terms. The clauses that usually need attention are the processing purposes and duration, the sub-processor list and how changes to it are notified, the international transfer mechanism, breach notification timing, and what happens to your data at the end of the contract. On that last point our answer does not change by tier: you can request your full data — a SQL dump plus files — at any time, and self-host it. RedminePRO is built on open-source Redmine. There is no proprietary format holding your history and no export fee. We earn your renewal; we don't lock it in.
Enterprise includes guided onboarding. In practice that means the work happens against your actual data and your actual process rather than a demo instance: project structure and hierarchy, trackers and workflows mapped to how your organization really escalates things, roles and permissions, custom fields, SSO configuration, integrations, and a working set of saved queries so that people arrive at something already useful rather than an empty Redmine.
If you are coming from an existing system, onboarding runs alongside migration. Migration starts with a free assessment — we tell you in writing what carries over, what needs a mapping decision and how long it will take, before you commit. The migration itself is a one-time professional-services fee, quoted after that assessment. We are specific about this because several competitors do bundle migration for free, and pretending we do the same would be a nice sentence and a bad surprise. Full detail on the migration page.
Every RedminePRO plan includes full Redmine administrator access, which means you can install plugins yourself. That is unusual in managed Redmine hosting — several competitors restrict plugin installation on their managed tiers — and for most customers it removes the problem entirely. Enterprise goes one step further: if the plugin you need does not exist, we build it. Typical cases are an integration with a system that has no public Redmine plugin, a workflow requirement that no off-the-shelf plugin models correctly, or a reporting output that has to match an existing internal format exactly. The standing plugin policy applies to everything else: compatible third-party plugins can be installed and supported, and custom plugins are reviewed case by case.
The full detail is on the security page, and this section deliberately does not duplicate it. The short version an enterprise buyer needs before deciding whether to read further:
HAZERCLOUD maintains active ISO/IEC 27001 certification covering its information security management system. RedminePRO operates inside that certified ISMS. The certificate belongs to the operating company, HAZERCLOUD INFOTECH LLP — we do not describe the product itself as certified, because that is not what an ISO/IEC 27001 certificate covers, and any vendor who tells you otherwise is describing their certificate inaccurately.
The infrastructure. RedminePRO runs entirely on AWS data centers, which hold SOC 1, SOC 2, PCI-DSS and ISO/IEC 27001 certifications — AWS's certifications covering the facilities and the platform underneath us.
What we do not claim. RedminePRO does not hold SOC 2, HIPAA or NIS2 certification in its own right, and we will not tell you otherwise on a sales call either. If your compliance program requires a vendor-held SOC 2 report, say so early and we will tell you plainly whether we can support your obligations and where the boundary sits. The distinction is between supporting your compliance program and holding a certificate, and it matters.
Controls, in brief. Encryption at rest via AWS KMS, FIPS 140-2 validated, AES-256, across all databases and disk volumes. TLS 1.2+ in transit on all services and APIs. Continuous encrypted backups with point-in-time recovery. Passwords stored salted and hashed, not recoverable by staff. Staff access to customer data only where required for support, restricted by job function and monitored. Payments processed by Stripe, a PCI Service Provider Level 1 — card data never touches RedminePRO systems.
Data residency. You choose your region at signup and your data resides in that region. RedminePRO operates in US, EU and India.
Start with what is already public. The security page covers the shared-responsibility split, certifications, encryption, backups, region and residency, and access control. A meaningful share of a standard questionnaire can be answered from it without anyone scheduling anything — send your reviewer there first.
Then send the questionnaire. We accept it in whatever format your process produces — your own spreadsheet, a standard framework template, or a portal. Send it via the contact form or raise it on a call, and tell us your deadline, because that is the single most useful piece of information for scheduling the response.
Expect one clarifying pass. Questionnaires written for a different class of vendor contain questions that do not map onto a managed application host. Rather than answering “not applicable” fifty times, we come back once with a short list of items that need context, and answer the rest directly.
Where we will say no. We will not claim a certification we do not hold to clear a checklist item. If a question asks whether RedminePRO holds SOC 2, the answer is no, followed by what we do hold and what AWS holds underneath us. Reviewers generally prefer that to a qualified yes.
Enterprise does not have a signup button, and that is deliberate. A tier defined by negotiated terms cannot be bought from a checkout page.
1. Book a call. Thirty minutes. Bring your seat count, your region requirement, your current system if you are migrating, and any hard compliance constraints. Book a call.
2. Get a written scope and quote. What is included, what the SLA commits to, what onboarding covers, and what it costs. In writing, before anything is signed.
3. Legal and security review in parallel. Your DPA and SLA templates, and your questionnaire, can run at the same time as the commercial conversation rather than after it.
If you are under 250 users and none of the above is a hard requirement, the Business plan is very likely the right answer and it is available today without a call. And if you want to understand how our managed platform actually operates first, what we manage on a managed Redmine instance is the page to read.