✨ Enterprise

info

New here? Start with the Enterprise Quickstart. You can also start a 30-day trial or book a demo.

Who is Enterprise for?

For teams running LiteLLM at scale (100+ users or 10+ production AI use-cases) that need SSO, audit logs, fine-grained access control, and professional support on top of OSS. SSO is free for up to 5 users. Beyond that, an enterprise license is required. Not sure if you qualify? Get in touch.

Why Enterprise?

LiteLLM OSS already covers the fundamentals: an OpenAI-compatible gateway, virtual keys, spend tracking, budgets, fallbacks, and request/response logging. Enterprise adds the controls larger organizations need to safely give hundreds of users and dozens of applications access to LLMs.

OSSEnterprise

AuthMaster key, UI_USERNAME and UI_PASSWORDSSO + SCIM, OIDC/JWT

Key ManagementVirtual keys, users, teams across LLM APIs, MCPs, and AgentsOrganizations, org/team admins, delegated admin roles

SecurityMaster key, virtual keys, and master key rotationVirtual key rotations, read/write to secret manager, IP allowlists, public and private route controls

GuardrailsAlways-on / request-based. Custom guardrails and Presidio (PII masking) are included. Built-in moderation callbacks need a license; see the note below.Key and team scoped guardrails

LoggingRequest/response logging, Prometheus metricsPer-key / per-team routing to Langfuse, Langsmith, Arize and more. Management-op logs

DeploymentSingle-region proxyMulti-region deployment under one license, admin/worker split

Features

Security and access

• SSO for the Admin UI. Okta, Azure AD, Google Workspace, and any OIDC/SAML provider
• JWT-based Authentication. Authenticate requests with your identity provider's tokens
• Audit Logs with retention policies. Track every admin action and key-level change
• Role-Based Access Control. Organizations, teams, and user roles
• Public and private route controls. Restrict admin routes and lock down surface area
• IP address-based access control lists. Restrict proxy access to specific CIDR ranges
• Key Rotations. Automate rotation for virtual keys
• Secret Managers. AWS KMS, AWS Secrets Manager, Azure Key Vault, Google KMS, Google Secret Manager, HashiCorp Vault, CyberArk, or a custom secret manager
• AI Hub. Share a public, branded page of available models, MCP servers, agents, and skills

Governance and cost

• Multi-tenant Architecture. Organizations, teams, projects, and keys
• Project Management. Group keys by application or use-case, with a budget, owners, rate limits, a model allowlist, and an isolated spend view. See the UI walkthrough
• Tag-based Budgets. Budgets and spend tracking by custom tag
• Model-specific Budgets per Virtual Key. Different limits per model, per key
• Temporary Budget Increases. Time-boxed spend bumps without permanent changes
• Soft Budget Email Alerts. Warn teams before they hit hard limits
• Generate Spend Reports. Programmatic access to spend by key, team, tag, or model

Observability and compliance

• Team-Based Logging. Route each team's logs to their own Langfuse project or callback
• Disable logging per team. GDPR-friendly opt-out at the team level
• Log export to GCS / Azure Blob. Durable storage for compliance
• Guardrails per key/team. Secret redaction, content moderation, banned keywords
• Enforced required params. Reject requests missing required metadata

Operations and branding

• Custom Swagger branding. Set your own title, description, and filtered routes on the API docs page
• Custom email branding. Your logo and colors on system emails
• Max request/response size limits. Protect the proxy from runaway payloads
• Team-managed models. Let teams bring their own keys and fine-tunes

Which guardrails need a license?

The OSS guardrail framework includes custom guardrails and Presidio for PII masking. These built-in callback integrations require a LiteLLM Enterprise license: llmguard_moderations, llamaguard_moderations, hide_secrets, openai_moderations, google_text_moderation, lakera_prompt_injection, and aporia_prompt_injection.

Run it

Deploy the Docker image, or build from the pip package, on your own infrastructure. A license key enables the features above and includes a dedicated support channel.

LITELLM_LICENSE="eyJ..."

No data leaves your environment. Procurement is available through AWS and Azure Marketplace.

Pricing depends on your deployment size. Get in touch to scope it.

Support

Standard support

Included with every enterprise license: a dedicated Slack or Teams channel with the engineering team for integration, deployment, and provider troubleshooting. Hours are 9am to 9pm PST, Monday through Friday. No guaranteed response time is included.

24/7 support SLAs

For teams that need guaranteed response times around the clock, 24/7 support SLAs are available for an additional fee.

Severity	Response SLA
Sev 0. 100% of production traffic is failing	1 hour
Sev 1. Partial production impact	6 hours
Sev 2–3. Setup issues and non-urgent bugs	24 hours (7am–7pm PT, Monday–Saturday)
Security patches	72 hours

Custom SLAs are available on request. For what support covers, see the Shared Responsibility Model.

Version support

LiteLLM supports the four most recent stable minor lines. Each of those lines keeps getting patch releases. Anything older reaches end of life and stops receiving updates. This policy takes effect Monday, June 29, 2026. As of mid-June 2026 the supported lines are 1.86, 1.87, 1.88, and 1.89, and the set rolls forward as new stable releases ship.

LiteLLM ships a new minor line roughly every week. Patching every older line meant carrying each fix onto every line still in support, and that cost grows with the number of lines rather than the number of fixes. Four lines is the window that still gets that care.

The window always holds the four most recent stable minor lines. When a new line ships, the oldest one drops out and stops receiving releases. There is no separate long-term maintenance track. For any supported line, use its latest patch. For a rare, high-severity issue, LiteLLM may still act outside that window.

To see where you stand, take the latest stable line and count back four. If your version is older than that, plan an upgrade. Pin to a minor line, take its patches, and move to a newer line before yours drops out.

FAQ

How do I set up and verify an Enterprise License?

Add the license key to your environment, then restart the proxy.

LITELLM_LICENSE="eyJ..."

Open http://<your-proxy-host>:<port>/. The API docs page should show Enterprise Edition in the description. If it does not, confirm the key is correct and unexpired, and that the proxy was fully restarted.

Where can I read more about data security and compliance?

See Data Security, Legal, and Compliance FAQs.

How is pricing structured?

Pricing is based on usage. Contact us for a quote tailored to your team.

How do I get day-0 support for new models without restarting?

Use Auto Sync New Models to pull the latest pricing and context-window data from GitHub on demand or on a schedule, with no restart required. Trigger a manual sync with POST /reload/model_cost_map, or schedule periodic syncs with POST /schedule/model_cost_map_reload?hours=6.