FL Fredrik Lindstrom


Last checked: , against each vendor’s own plan, pricing, admin and privacy pages.

$20. $25. $30. Those are the seat prices on the pricing pages, and they’re the numbers that end up in the budget.

A security team asks different questions before an agent touches company data. Can we see what it did? Can we remove a leaver on the day they leave? Where is the data kept? The answers sit on different plans from the price.


Six controls, four vendors: the lowest plan that gives you each one

Lowest plan carrying each control at Microsoft, Mistral, OpenAI and Anthropic, as published on 14 October 2026
ControlMicrosoftMistralOpenAIAnthropic
Single sign-onAny Microsoft 365 plan, through Entra IDEnterpriseBusinessTeam
Automatic user provisioning (SCIM)Built in, through Entra IDNot yet generally availableEnterpriseEnterprise
Audit log you can exportBusiness plans and E3 (Audit Standard, 180 days)Enterprise: logs are viewable, export not supportedEnterprise (Compliance API)Enterprise (180 days)
No training on your data by defaultAll plansEnterprise; other plans can opt outBusiness and aboveAll commercial plans
Admin control of agents and connectorsAgent Registry included; agent security controls need Agent 365 ($15) or E7Connectors can be allowed, restricted or blocked; plan tier not publishedBusiness: turn agent building and publishing on or off. Enterprise: role-based access and a connector registryTeam: admin control of connectors. Enterprise: per-tool policy by role
Where your data livesEU Data Boundary for EU customers; in-country storage through add-onsHosted in the EU by default; on-premises or private cloud on EnterpriseEnterprise and Edu: storage in 10 regionsUS-only processing on usage-based Enterprise; EU and Asia-Pacific only through Amazon Bedrock, Google Vertex AI or Microsoft Foundry
Seat price on the page (USD, per user per month, billed annually)Microsoft 365 Copilot $30, or Copilot Business $21 (up to 300 users), on top of the base planTeam $24.99; Enterprise price not publishedBusiness $20; Enterprise price not publishedTeam $20; Enterprise $20 per seat plus usage

Where the pattern holds, and where it breaks

OpenAI, Anthropic and Mistral follow the same shape. The audit log and automatic provisioning arrive on Enterprise. OpenAI and Anthropic put sign-on and a no-training default on their entry business plans; Mistral keeps both on Enterprise. Two of the three, OpenAI and Mistral, don’t publish an Enterprise price at all.

Microsoft inverts it. Identity, provisioning and a 180-day audit log come with the business plans, because they ride on Entra ID and Microsoft Purview, which the customer already licenses. The step up is agent governance: the Agent 365 add-on, or the E7 plan that bundles it with Copilot.

Mistral is the residency outlier. Its data sits in the EU by default on every plan, and Enterprise customers can run it on-premises. For a European subsidiary or a regulated client, that row can matter more than the price row.

Anthropic’s residency answer runs through other clouds. Its own hosting offers US-only processing on usage-based Enterprise. European or Asia-Pacific residency means buying Claude through Amazon Bedrock, Google Vertex AI or Microsoft Foundry.

Before you buy: four questions for the vendor

  1. Which plan do we need for an audit log we can export, and how long is it kept?
  2. When someone leaves, how are they removed: automatically through our identity provider, or by hand?
  3. Who in our company can switch on agents and connect them to our systems, and can we limit that by role?
  4. Where is our data stored and processed, and does that change on the plan we’re quoting?

If the answer to any of them is “a higher plan”, that plan is the real price of the agent.

Disputed or recently changed

These cells conflict between the vendor’s own pages, or changed in 2026. The table shows the more specific or more recent page.

  • Mistral, single sign-on. The admin documentation says SAML single sign-on needs Enterprise. One help article implies Team admins have single sign-on too.
  • Mistral, product names. Le Chat was renamed Mistral Vibe in August 2026, and La Plateforme is now Mistral Studio. Older pages still use the former names.
  • Mistral, training default on Team. Enterprise is opted out of training by default. No default is published for Team; admins can switch training off for the organisation.
  • OpenAI, data retention on Business. The enterprise privacy page says Business workspace admins control retention. The pricing page lists custom retention for Enterprise only.
  • OpenAI, data residency on Business. The pricing page shows no residency on Business. A Business release note from April 2026 adds Japan residency for some synced apps.
  • OpenAI, agent products. Agent Builder shuts down on 30 November 2026, and custom GPTs are being retired in favour of plugins.
  • Anthropic, role-based permissions. The pricing page places role-based access on Enterprise. The Team plan article lists role-based permissioning for Team.
  • Microsoft, Agent 365 eligibility. The pages differ on which base plans Agent 365 attaches to: E5, Business Premium, or bought on its own at $15.
  • Microsoft, Copilot Business price. $21 per user, with an $18 promotion for the first year on purchases between 1 July and 31 December 2026.

Sources, by vendor

All read on 14 October 2026.

Microsoft

Mistral

OpenAI

Anthropic

Plans and prices change. This page shows what each vendor published on the date above, not a recommendation of one vendor over another. Check the vendor’s current page before you buy.

Related

The agent halt matrix — where the boundary between advising and acting gets drawn, and why it has to be enforced somewhere the model cannot reach.

Answering the AI section of a customer security questionnaire — the four artifacts buyers actually ask for, and why three of them move in days while one needs 90.

The Governance Memo carries this work monthly for boards and CISOs — one breach post-mortem and two or three governance items.