Reference letters. Clear. Fair. Compliant.
Solution · Large enterprises6 min readFor group HR
Solutions · Enterprise

ZeugnisPilot Enterprise for Swiss large enterprises

SSO, API, multi-tenant, custom templates and a dedicated Customer Success Manager. When you want to standardise across multiple business units — without losing compliance or brand consistency.

Book a consultationView pricing
  • SAML/OIDC + SCIM
  • Multi-tenant + custom templates
  • DPA with individual clauses
What goes beyond Pro

Enterprise features

SSO (SAML / OIDC)

Integration with Azure AD, Okta, Keycloak and all common identity providers. SCIM 2.0 for automatic user provisioning and de-provisioning.

Multi-tenant

Per subsidiary or brand: own template, own logo, own list of signatories. Audit logs strictly separated.

Custom templates

Brand-compliant PDF layout following your corporate design. Typeface, colours, letterhead, footer — we set this up once.

API access

REST API for audit export, reference status queries and integration into HRIS (Workday, SAP SuccessFactors, Personio).

Dedicated CSM

Customer Success Manager for onboarding, training of your HR teams, regular reviews and escalation path.

DPA with individual clauses

We negotiate your standard clauses. Specific data residency, audit rights, availability SLAs.

Practical examples

Three typical enterprise scenarios

  • Group with 5 subsidiaries: Per subsidiary, its own tenant configuration with its own letterhead and signatures. Group HR sees all audit logs consolidated.
  • HR shared service centre: A central HR team serves several companies (e.g. fiduciary mandates). Tenant switching in the wizard, separate audit logs.
  • International group with Swiss HQ: Switzerland-specific references via ZeugnisPilot, integration into Workday as the source of truth for employee data via SCIM.
How the rollout runs

Onboarding process

  • Week 1: SSO setup (SAML 2.0), tenant configuration, default tonality profiles.
  • Week 2: Custom template design by our design team. Brand review with you.
  • Week 3: Pilot with one business unit, training of key users (2 × 60 min).
  • Weeks 4–8: Roll-out to further units, weekly stand-ups with the CSM.
  • Ongoing: Quarterly reviews, roadmap sessions, escalation path to engineering.
FAQ

Frequently asked questions

Which identity providers are supported?
SAML 2.0 is standard. Specifically tested: Azure AD, Okta, Auth0, Keycloak, Google Workspace, OneLogin. OIDC as well. For exotic IdPs we check on a case-by-case basis — usually SAML is sufficient.
How does SCIM provisioning work?
Via SCIM 2.0 your IdP manages the ZeugnisPilot accounts. New HR users are created automatically with role and tenant assignment. Automatic de-provisioning on departure. No more manual user management.
What does the API look like?
REST with OAuth 2.0 client credentials. Endpoints: GET /api/v1/zeugnisse (list with status), GET /api/v1/zeugnisse/{id} (detail with audit log), GET /api/v1/audit (audit export for compliance), POST /api/v1/zeugnisse (for pre-population from HRIS). Full OpenAPI spec on request.
What does the onboarding process look like for a large enterprise?
Phase 1 (1–2 weeks): SSO setup, tenant configuration, custom template design. Phase 2 (1 week): Pilot with one business unit, training of key users. Phase 3 (ongoing): Roll-out to further units, quarterly reviews with your CSM.
Is there an on-premise variant?
On request. We then deliver ZeugnisPilot as a container image with documented Helm-chart installation for Kubernetes (or Docker Compose). Anthropic Claude must in any case be addressed externally — there are no models we can run locally.
Which availability SLAs do you offer?
Standard: 99.0% on annual average (Pro plan, without SLA penalties). Enterprise: up to 99.9% with service credits. Planned maintenance windows by agreement, outside your business hours.
Audit rights and compliance reviews?
Yes. In the Enterprise contract we grant you a contractual audit right (typically once per year, with prior notice). We deliver an annual ISAE-3000 report on the most important controls as well as pen-test reports.

Let's talk about your requirements

Enterprise pricing is quoted individually based on user count, integration scope and SLA. Initial conversation typically 30 minutes.

Book a consultationenterprise@zeugnispilot.ch