Loading the SOTA2 catalog…
Palette
Creative engine for multimodal content, providing one generation layer for teams creating across audiences, formats, and contexts.
- Founded
- 2026
- Headquarters
- San Francisco
- Company size
- 1–10
- Products tracked
- 2
Products by Palette
Pricing for Palette
Usage Based, Subscription, Enterprise Custom
This is the broad commercial model reported for Palette. Product-level terms are listed below when available.
- Pricing model
- Usage Based, Enterprise Custom
- Entry option
- Free trial
- Starting price
- $0.01 / credit
- Pricing model
- Usage Based, Enterprise Custom
- Entry option
- Free trial
- Starting price
- $0.01 / credit
Trust profile
Security and compliance
SAML
OIDC
AES-256 at rest encryption
TLS 1.2+ in transit encryption
EU SCCs for EEA/UK/Swiss data transfers
TLS 1.2+ in transit encryption
AES-256 at rest encryption
Cloud provider KMS key management with rotation and access controls
Multi-tenant architecture with strict logical tenant isolation
Role-based access control (RBAC) across UI, API, and AI agents
Enterprise SSO via SAML and OIDC
Multi-factor authentication with enforcement option
Time-limited sessions
Principle of least privilege across infrastructure
Component-level data access minimization
Per-request tenant context enforcement at data access layer
AI agents scoped to requesting user/workflow permissions
Prompts not used to train public foundation models
Model providers contractually prohibited from training on customer data
Agent action logging with attribution; sensitive actions can require human approval
Audit logs of significant events (authentication, permission changes, data access, agent actions)
Security-relevant log anomaly monitoring
Customer access to own workspace audit logs
Regular encrypted backups
Disaster recovery plan with defined recovery objectives; regular restore testing
Redundant availability zone deployment
Regular patching and vulnerability scanning
Independent periodic penetration testing
Responsible vulnerability disclosure program
Incident response plan with defined roles, severity levels, and escalation paths
Customer breach notification without undue delay
Secure SDLC: code review, automated testing, security checks before release
Separation of development, staging, and production environments
Restricted production access with strong engineering authentication