Every product above a certain size grows an enterprise tier. The pricing page says SSO, SLA, dedicated support, custom contracts. Most of that is real. Some of it is a checkbox that exists because a procurement form asked for it.
Here is how to tell which is which, using headshot and portrait tooling as the example because it is the one I know.
The questions that separate real from checkbox
SSO: which protocol, and is SCIM included?
SAML with no SCIM means you can log people in and you cannot deprovision them automatically. For a tool holding employee photographs, an offboarding path that depends on someone remembering is not an offboarding path. Ask specifically about SCIM, not "SSO support".
SLA: on what, and what is the remedy?
An uptime SLA on an API is meaningful. An SLA that covers the marketing site is not. And an SLA with no service credit attached is a paragraph, not a commitment.
Audit log: what is in it, and can you export it?
For anything processing personal data you want to know who downloaded what and when. "We have logging" and "you can export an audit trail" are different products.
Data residency: available, or on the roadmap?
If your legal team needs EU-only processing, this is a hard gate rather than a preference, and roadmap answers do not clear it.
Contract: can they redline?
A vendor whose enterprise tier is a bigger plan with the same click-through terms has not really got one. Being able to negotiate a DPA is most of what enterprise means in practice.
The executive-visibility case
There is a narrower version of this that comes up constantly: the leadership photos need to be handled differently from everyone else's.
Higher scrutiny, more places they end up, and usually a communications team with opinions. Practically that means a separate review step, a longer approval loop, and someone who cares about consistency across the leadership grid specifically, since that grid gets looked at far more than the general directory.
Tools vary a lot on whether they support that gracefully or whether you end up running a separate manual process for 6 people.
The comparisons, with the usual caveat
We write these up per competitor. The enterprise-tier ones are versus Aragon, versus HeadshotPro and versus InstaHeadshots. The executive-specific ones are HeadshotPro and InstaHeadshots.
They are written by us about competitors, so treat them as a claim rather than a finding. Their value is the list of dimensions to ask about, and you should ask us the same questions.
The procurement reality
The person buying this is usually in operations and inherited it from an email that said "we need everyone's photo updated". They are not going to run a security review, and the vendor knows it.
The 20 minute version: ask for the subprocessor list, the SCIM answer and whether the DPA is negotiable. Three questions, and the answers tell you roughly where on the spectrum a tool sits.
More from this series
- Latency budgets for batch image generation, and why "20 minutes" is the wrong number to optimise
- The checklist I use before sending employee faces to any third party
- How to read a vendor case study when you are the engineer who has to make it work
- Antes de subir quince fotos de tu cara: los seis documentos que conviene leer
On BetterPic
Top comments (0)