Decision guide
What the AI seat price buys, and where the controls sit
Published
Last checked: , against each vendor’s own plan, pricing, admin and privacy pages.
$20. $25. $30. Those are the seat prices on the pricing pages, and they’re the numbers that end up in the budget.
A security team asks different questions before an agent touches company data. Can we see what it did? Can we remove a leaver on the day they leave? Where is the data kept? The answers sit on different plans from the price.
Six controls, four vendors: the lowest plan that gives you each one
| Control | Microsoft | Mistral | OpenAI | Anthropic |
|---|---|---|---|---|
| Single sign-on | Any Microsoft 365 plan, through Entra ID | Enterprise | Business | Team |
| Automatic user provisioning (SCIM) | Built in, through Entra ID | Not yet generally available | Enterprise | Enterprise |
| Audit log you can export | Business plans and E3 (Audit Standard, 180 days) | Enterprise: logs are viewable, export not supported | Enterprise (Compliance API) | Enterprise (180 days) |
| No training on your data by default | All plans | Enterprise; other plans can opt out | Business and above | All commercial plans |
| Admin control of agents and connectors | Agent Registry included; agent security controls need Agent 365 ($15) or E7 | Connectors can be allowed, restricted or blocked; plan tier not published | Business: turn agent building and publishing on or off. Enterprise: role-based access and a connector registry | Team: admin control of connectors. Enterprise: per-tool policy by role |
| Where your data lives | EU Data Boundary for EU customers; in-country storage through add-ons | Hosted in the EU by default; on-premises or private cloud on Enterprise | Enterprise and Edu: storage in 10 regions | US-only processing on usage-based Enterprise; EU and Asia-Pacific only through Amazon Bedrock, Google Vertex AI or Microsoft Foundry |
| Seat price on the page (USD, per user per month, billed annually) | Microsoft 365 Copilot $30, or Copilot Business $21 (up to 300 users), on top of the base plan | Team $24.99; Enterprise price not published | Business $20; Enterprise price not published | Team $20; Enterprise $20 per seat plus usage |
Where the pattern holds, and where it breaks
OpenAI, Anthropic and Mistral follow the same shape. The audit log and automatic provisioning arrive on Enterprise. OpenAI and Anthropic put sign-on and a no-training default on their entry business plans; Mistral keeps both on Enterprise. Two of the three, OpenAI and Mistral, don’t publish an Enterprise price at all.
Microsoft inverts it. Identity, provisioning and a 180-day audit log come with the business plans, because they ride on Entra ID and Microsoft Purview, which the customer already licenses. The step up is agent governance: the Agent 365 add-on, or the E7 plan that bundles it with Copilot.
Mistral is the residency outlier. Its data sits in the EU by default on every plan, and Enterprise customers can run it on-premises. For a European subsidiary or a regulated client, that row can matter more than the price row.
Anthropic’s residency answer runs through other clouds. Its own hosting offers US-only processing on usage-based Enterprise. European or Asia-Pacific residency means buying Claude through Amazon Bedrock, Google Vertex AI or Microsoft Foundry.
Before you buy: four questions for the vendor
- Which plan do we need for an audit log we can export, and how long is it kept?
- When someone leaves, how are they removed: automatically through our identity provider, or by hand?
- Who in our company can switch on agents and connect them to our systems, and can we limit that by role?
- Where is our data stored and processed, and does that change on the plan we’re quoting?
If the answer to any of them is “a higher plan”, that plan is the real price of the agent.
Disputed or recently changed
These cells conflict between the vendor’s own pages, or changed in 2026. The table shows the more specific or more recent page.
- Mistral, single sign-on. The admin documentation says SAML single sign-on needs Enterprise. One help article implies Team admins have single sign-on too.
- Mistral, product names. Le Chat was renamed Mistral Vibe in August 2026, and La Plateforme is now Mistral Studio. Older pages still use the former names.
- Mistral, training default on Team. Enterprise is opted out of training by default. No default is published for Team; admins can switch training off for the organisation.
- OpenAI, data retention on Business. The enterprise privacy page says Business workspace admins control retention. The pricing page lists custom retention for Enterprise only.
- OpenAI, data residency on Business. The pricing page shows no residency on Business. A Business release note from April 2026 adds Japan residency for some synced apps.
- OpenAI, agent products. Agent Builder shuts down on 30 November 2026, and custom GPTs are being retired in favour of plugins.
- Anthropic, role-based permissions. The pricing page places role-based access on Enterprise. The Team plan article lists role-based permissioning for Team.
- Microsoft, Agent 365 eligibility. The pages differ on which base plans Agent 365 attaches to: E5, Business Premium, or bought on its own at $15.
- Microsoft, Copilot Business price. $21 per user, with an $18 promotion for the first year on purchases between 1 July and 31 December 2026.
Sources, by vendor
All read on 14 October 2026.
Microsoft
- Microsoft 365 enterprise plans and pricing
- Microsoft 365 Copilot pricing, enterprise · business
- Microsoft Agent 365 · Agent 365 overview
- Agent Registry in the Microsoft 365 admin center
- Audit logs for Copilot and AI applications · Purview audit solutions overview
- Microsoft 365 Copilot privacy
- Microsoft 365 Copilot requirements · Entra licensing
Mistral
- Mistral pricing · Mistral Vibe
- SAML SSO · Admin overview
- Audit logs · Connector permissions
- Training opt-out · Where data is stored
- Le Chat is now Vibe
OpenAI
- ChatGPT business pricing
- SSO for ChatGPT Business · SCIM provisioning
- Compliance Platform for Enterprise and Edu
- Enterprise privacy · Data residency for ChatGPT
- Admin controls for plugins and apps · Business release notes
Anthropic
- Claude pricing · What is the Team plan
- JIT and SCIM provisioning · Audit logs
- Training on commercial data
- Organisation-wide connector authorisation · Role-based permissions
- US-only inference · Regional compliance
Plans and prices change. This page shows what each vendor published on the date above, not a recommendation of one vendor over another. Check the vendor’s current page before you buy.
Related
The agent halt matrix — where the boundary between advising and acting gets drawn, and why it has to be enforced somewhere the model cannot reach.
Answering the AI section of a customer security questionnaire — the four artifacts buyers actually ask for, and why three of them move in days while one needs 90.
The Governance Memo carries this work monthly for boards and CISOs — one breach post-mortem and two or three governance items.