Built for scale.
SAML SSO, SCIM provisioning, audit logs, custom DPAs and a 99.9% SLA — wrapped around the same Banana platform your reps already love.
- 10k+
- Seats provisioned in 24h
- 99.9%
- Uptime SLA
- SOC 2
- Type II certified

SSO, SCIM & RBAC
Okta, Azure AD, Google Workspace and any SAML 2.0 IdP. Just-in-time provisioning, group-based roles and offboarding in one click.
Branded at every level
Org-wide card templates, regional sub-brands, custom domains, white-labeled profiles and lockable design tokens for your design system team.
Security & compliance built-in
SOC 2 Type II, ISO 27001, GDPR, CCPA. Custom DPA, data residency in EU/US/APAC, audit logs streamed to your SIEM.

Identity
Provision 10,000 cards in a single afternoon.
Push your directory through SCIM. Banana creates branded digital profiles, ships physical NFC cards to each employee's home address, and revokes access the moment HR offboards them.
- SAML 2.0 SSO (Okta, Azure AD, Google, Ping, OneLogin)
- SCIM 2.0 just-in-time provisioning
- Group-based roles & permission scopes
- Bulk card shipping to home addresses worldwide

Brand
Your brand on every tap, scan and signature.
Design once at HQ, lock the system, and let regional teams use it. Templates, fonts, colors, layouts and approved imagery — controlled, versioned and rolled out instantly.
- Org & sub-brand template libraries
- Custom domain & white-label profiles
- Approved imagery & font lockdown
- Email signature deployment for every seat

Security
What your CISO wants to read.
SOC 2 Type II, ISO 27001, penetration tests, vulnerability disclosure program, and end-to-end encryption on notes. Choose data residency in EU, US or APAC. Custom DPA and BAA available.
- SOC 2 Type II & ISO 27001
- EU / US / APAC data residency
- Audit log streaming (Splunk, Datadog, S3)
- Custom DPA, BAA & MSA available
How it works
Live in minutes, not months.
- Step 1
Kickoff & scoping
Dedicated solutions engineer maps your IdP, brand system, regions and rollout phases.
- Step 2
Pilot in 2 weeks
100-seat pilot with full SSO, branded cards shipped and CRM integrations live.
- Step 3
Roll out globally
SCIM provisioning + bulk card shipping covers thousands of seats across regions in days.
- Step 4
Ongoing success
Named CSM, quarterly business reviews, 24/7 enterprise support and roadmap input.
Capabilities
Built to go the distance.
Every plan ships with the essentials. Upgrade only for team-scale, advanced security, and AI usage at volume.
Compare plans- SAML 2.0 SSO & SCIM provisioning
- Role-based access control
- SOC 2 Type II & ISO 27001
- Custom DPA, BAA & MSA
- EU / US / APAC data residency
- Audit log streaming to your SIEM
- Salesforce, HubSpot & Workday sync
- Dedicated CSM & 24/7 support
- 99.9% uptime SLA
- Custom domain & white-label
FAQ
Questions, answered.
How does SSO and SCIM work?
We support any SAML 2.0 identity provider — Okta, Azure AD, Google Workspace, Ping, OneLogin, Duo and more. SCIM 2.0 handles just-in-time provisioning: new hires get a profile and a card shipped the day HR adds them, and offboarding revokes access instantly across web, mobile and the physical NFC chip.
Where is our data stored?
You choose. Banana operates regional data planes in the EU (Frankfurt), US (Virginia) and APAC (Singapore). All data — profiles, notes, recordings — stays in your chosen region. Cross-region replication is opt-in and disabled by default for regulated industries.
What compliance certifications do you hold?
SOC 2 Type II, ISO 27001, GDPR and CCPA compliant. HIPAA-ready with a signed BAA available on Enterprise. Annual third-party penetration tests, public vulnerability disclosure program and a security trust center with current reports.
Can we white-label the product?
Yes. Custom domain, removed Banana branding, your logo and color tokens on every surface — profile pages, emails, wallet passes, signature blocks. Enterprise plan includes co-branded mobile apps for the largest deployments.
What does pricing look like at 10,000 seats?
Per-seat with volume tiers. Includes unlimited cards (you only pay shipping & material on physical replacements), unlimited AI usage within fair-use, all integrations, and dedicated success. Typical 10k-seat deployments come in well below the cost of a single full-time CRM administrator.
How fast can we go live?
Pilot of 100 seats in 2 weeks. Full rollout to 10,000+ seats typically takes 4–6 weeks end-to-end, including procurement, SSO config, brand template approval and bulk card shipping to home addresses worldwide.
Enterprise use cases
Built for the way large orgs actually buy.
Global rollouts
Multi-region data planes, bulk card shipping to 80+ countries, language-aware profiles.
ExploreSales orgs at scale
Per-team templates, manager dashboards, Salesforce & HubSpot two-way sync.
ExploreRegulated industries
HIPAA BAA, audit logs, signed contracts, data residency controls.
ExploreIT & security teams
SSO, SCIM, SIEM streaming, single trust center, named security contact.
ExploreReady when you are.
Get a custom demo, security pack and pricing model built around your seat count and regions.