In this article, you will learn all about the Enterprise features of Hugging Face, and how to get them - and why companies like NVIDIA, Meta, Microsoft, Amazon, Salesforce, Arm and Boston Consulting Group chose to upgrade their organization to Enterprise.
Executive Summary
Hugging Face is the leading open platform for AI Builders - researchers, data scientists, machine learning engineers and software developers. 18 million AI Builders use Hugging Face, and created over 400,000 organizations to collaborate privately on models, datasets and applications.
Free organizations are designed for small teams who need to collaborate and share transparently, but do not scale to medium sized companies: in free organizations, members join with their personal accounts, and everyone has access to everything.
For companies whose teams need privacy, security, compliance and governance when building AI, Hugging Face offers Hugging Face Enterprise and Enterprise Plus.
Enterprise provides advanced collaboration, compute, security and compliance features for organizations.
Enterprise Plus adds exclusive security and governance features, and direct expert support from the Hugging Face team.
| Free Orgs | Enterprise | Enterprise Plus | |
|---|---|---|---|
| Collaboration | DIY Admin | Resource Groups Private Datasets Viewer Download Analytics Blog Articles Extended Private Storage | Resource Groups Private Datasets Viewer Download Analytics Blog Articles Extended Private Storage |
| Compute | Cost Management Inference Providers Jobs Inference Endpoints GPU Quotas Spaces ZeroGPU Spaces Dev Mode | Cost Management Inference Providers Jobs Inference Endpoints GPU Quotas Spaces ZeroGPU Spaces Dev Mode | |
| Security | DIY Admin | Standard SSO Group Provisioning 2 Factor Authentication Access Token Management | Managed SSO Group Provisioning Managed Users 2 Factor Authentication Access Token Management |
| Governance | Audit Logs | Audit Logs HF Model Gateway (preview) | |
| Compliance | Storage Regions | Storage Regions Country Blocking Network Security | |
| Support | Forum | Slack |
Enterprise and Enterprise Plus can be purchased with a 1-year contract - see details below.
How do all these features benefit your organization? Let’s dive in.
Why upgrade to Enterprise
Collaboration
Enterprise and Enterprise Plus organizations allow their members to privately host and share unlimited models, datasets, Storage Buckets and Spaces repositories. Members of Enterprise organizations benefit from higher rate limits accessing all Hugging Face services: 6x higher for Enterprise users and up to 100x higher for Enterprise Plus users.
In addition, Enterprise organizations offer high storage limits for public and private repositories, including 1TB of public storage, and 1TB of private storage per member ; for instance an Enterprise organization with 1,000 members can store up to 1.2 Petabyte in public repositories and 1 Petabyte in private repositories at no additional cost!
In free organizations, everyone has access to everything. To organize resources and control costs across teams and projects, Enterprise organizations have access to Resource Groups. Enterprise organization admins can create new Resource Groups to assign specific repositories, add members and assign them specific permissions and budgets. This is great for teams who want to work on a specific project privately from the rest of the organization, or for different business units to segregate the models, datasets and Spaces they are working on. Resource Groups also allow admins to specify default access and budget rules for any new member who joins the Enterprise organization.
A favourite feature of Hugging Face for data scientists is the Datasets Viewer and the Data Studio. With Datasets Viewer makes it easy to preview the content of public datasets, and with Data Studio you can apply SQL queries to the dataset, or even ask AI to create and run them for you! Enterprise organizations make Dataset Viewer and Data Studio available to private datasets hosted on the organization.
Hugging Face is the home of over 4 million public models, datasets contributed by the community. Enterprise organizations have access to power features for model and dataset publishing. Enterprise Analytics provide detailed download analytics for public repositories, easily exported via CSV. Enterprise organizations can also set up gated access to groups of public repositories, for instance to require accepting terms or a manual approval. Enterprise Plus organizations have access to advanced gating features, for instance to block access to their public repositories in certain countries or regions. Enterprise organizations can also publish blog articles on the Hub under the company name, to share research, releases and announcements with the Hugging Face community.
Compute
When upgrading their organization to Enterprise, companies provide their employees with powerful and flexible compute options to use, train and deploy AI models and applications.
Enterprise organizations can track spending, and set up monthly spending limits for each Resource Group. These spend limits can be aggregate and specific to compute services like Inference Providers, Jobs and Inference Endpoints. This allows admins to granularly control budgets and compute feature access for different teams or groups of people within the organization.
Enterprise organization members can use Inference Providers to use and integrate some of the most popular open models into their AI applications, with serverless inference powered by Hugging Face and Inference Providers, including Together AI, fal, Novita AI, Cerebras. Enterprise organizations get $2 free credit per member each month toward Inference Providers - for instance a 1,000 member organization can use for up to $2,000 of Inference Providers each month for free. With Enterprise, organizations get a dashboard with daily usage and cost, per provider and per user. Admins can also set a monthly spend limit to control inference costs across all providers.
Enterprise organizations provide controlled access and spend over powerful GPU compute options to train and deploy models, billed by the second. With Jobs, AI Builders can easily spin up a GPU to run a uv script or Docker image right from their terminal. Reference scripts maintained by the Hugging Face team make it super easy to fine-tune or post-train a model with trl or Unsloth. And with Inference Endpoints, any model can be easily deployed on Hugging Face GPU infrastructure. A model catalog offers ready-to-use, optimized vLLM and SGLang configurations to deploy the latest open models in one click or line of code.
To show what an AI model can do, AI Builders use Hugging Face Spaces. Spaces are hosted, interactive AI applications - over 1M public and private Spaces were created on Hugging Face. For companies, private Spaces is an ideal way to demo a model or application to colleagues. Enterprise organizations have access to advanced compute options for their Spaces:
- ZeroGPU - Spaces can be powered by powerful NVIDIA RTX Pro 6000 Blackwell GPUs that spin up only when the Space is used. Enterprise users get 12x more ZeroGPU usage - an hour each day.
- GPU Upgrades - Spaces can be upgraded to dedicated NVIDIA GPUs for the most demanding applications, up to 8x L40S or 8x A100.
- Dev Mode - Dev Mode makes developing and debugging Spaces faster, connecting to the underlying container via SSH or VS Code.
- Custom Domains - Spaces can be served from the company’s own domain, for a branded experience.
Security
Free organizations are designed for minimum friction adding collaborators, students, professionals to foster transparent collaboration. Enterprise organizations provide a complete solution to apply security and access control rules, ensure the company private data stays safe and the right people have access to the right resources.
To secure accounts with access to the organization’s private resources, Enterprise organization admins can require 2-Factor Authentication for all members of the organization, and require admin approval for new members.
To reduce the risk of members inadvertently publishing confidential information as public repositories, Enterprise organization admins can make new repositories private by default, or disable public repositories altogether.
User Access Tokens are keys users can create to give applications the permission to access private models, datasets and applications on Hugging Face. It’s very important to create and manage User Access Tokens with best security practices in mind - only give the minimum required scope of access, regularly rotate tokens and invalidate unnecessary tokens. For organization admins, User Access Tokens can be a source of concern as each token is a potential attack vector. Enterprise organizations can reduce risk and enforce best practices with Access Token Management.
With Access Token Management, organization admins have a centralized view of every User Access Token created by members of the organization. Each token can be inspected, and revoked. Admins can set up organization policies, for instance to disallow the creation of broad access tokens and require fine-grained tokens, and/or to require admin approval for any new token created by users of the organization.
When an employee leaves the company, any automation still authenticating with their personal access token leaves with them - or worse, keeps running unnoticed. Service Accounts are organization-owned identities for programmatic access such as CI/CD pipelines, automation scripts and backend integrations: they belong to the organization rather than to a person, so automated workflows keep running as people join and leave. Admins create them from the organization settings and issue each one fine-grained access tokens, scoped either organization-wide or to specific repositories, which can be rotated or revoked at any time without affecting anyone’s personal tokens. Service Accounts cannot sign in interactively, and they do not consume a paid seat.
To make sure that members with access to the organization’s private resources are actually employees of the company, Enterprise organizations can set up Single Sign-On (SSO). With SSO, user authentication to access Enterprise organization resources is managed by the company Identity Provider, such as Okta or Azure Active Directory. Roles and Teams mapping is available to automatically give specific access control permissions to employee groups, and/or assign them to Resource Groups.
Enterprise Plus organizations have access to Managed SSO, where the company Identity Provider replaces the Hugging Face login entirely and becomes the single authentication method across the whole platform. Members do not need a pre-existing Hugging Face account: with SCIM user provisioning, accounts are created automatically the first time an employee authenticates, profile changes in the Identity Provider are kept in sync, and accounts are deactivated when employees are deprovisioned. SCIM also supports group provisioning, so groups pushed from the Identity Provider can be linked to Resource Groups with a specific role - employees automatically get the right access to the right repositories as they join, move between teams, or leave the company. Managed SSO supports SAML 2.0 and OIDC with providers such as Okta, Microsoft Entra ID and Google Workspace, and is set up together with the Hugging Face team.
With Enterprise Plus, the user accounts belonging to the organization are Enterprise Managed Users, fully controlled by the company. This drastically reduces the risk of confidential information being published, because a managed account only exists inside the organization: employees cannot create repositories under their personal profile, join another organization, or subscribe to PRO on their personal account. And since they cannot change their account email address or set a password, the account stays tied to the company Identity Provider and stops working as soon as the employee is deprovisioned.
Governance
Enterprises need traceability and auditability of their confidential information. Enterprise organization admins on Hugging Face have access to Audit Logs to inspect and retrieve all changes made to their organization, such as new users, access tokens or repositories, changes to resource groups, access controls and more. Each log entry includes information about the user, their location, the action, change and time. Logs can be easily downloaded as JSON files for analysis.
Enterprise organizations also get budget and spend reporting per service, broken down by team or department through Resource Groups. Because every repository and member belongs to a Resource Group, admins can attribute consumption to the team that generated it, instead of reconciling a single organization-wide bill - the chargeback and accountability picture finance teams need to justify and plan AI investment.
With granular feature access, Enterprise organization admins decide which groups of members are allowed to use which features. This is how companies stay in control of actions taken in their name or on their budget - for instance restricting who can publish a blog post on behalf of the company, or who can spin up GPUs with Inference Endpoints.
Model Gateway is an on-premise proxy of the Hugging Face Hub for companies with strict security, compliance and governance requirements. Deployed by the company within their own environment, it acts as a caching, governance and security layer between the employee network and the public Hugging Face Hub. With Model Gateway, companies can:
- Allow and restrict specific models, datasets and Spaces applications
- Enforce license and file format policy - for instance blocking GPL or Non-Commercial licensed models, or models stored as Pickle files
- Require model security scanning, and plug custom scanners into the Model Gateway registry
- Guarantee model supply chain robustness, with models and versions cached in company storage so they stay available even if their provider deletes them
- Simplify access to Gated models like Meta Llama, Google Gemma or Mistral - permission is requested once, then the model is available to everyone at the company
- Attribute and audit every model download by employee
Model Gateway is a new feature currently in preview for select Enterprise Plus organizations.
Compliance
Enterprise organizations can choose where their data is hosted with Storage Regions. Models, Datasets, Spaces can be stored in either US-based servers or Europe-based servers, allowing European companies to use Hugging Face in a GDPR compliant way.
Hugging Face is SOC 2 Type II certified and GDPR compliant, covering the baseline requirements of most enterprise security and procurement reviews.
Regulated industries often have geofencing requirements. Enterprise Plus organizations can block visitors from specific countries and regions across all of their models and datasets: access requests to gated repositories are automatically rejected, and admins can extend enforcement to every repository - including public ones - where blocked visitors instead see a “not available in your region” notice and the dataset viewer is disabled. Enforcement applies whether or not the visitor is signed in.
Some companies would rather their employees not be identifiable as Hugging Face users at all. Enterprise organizations can hide the members list so that it is no longer visible on the organization page. Membership can still potentially be discovered by other means, so this should not be relied upon for critical use cases.
With Network Security, Enterprise Plus organizations can define their corporate network and precisely define which public models, datasets, organizations and applications should be accessible to their employees. Admins can require authentication to access Hugging Face, so that only authorized employees can access it. In addition, admins can define exactly which resources should be allowed or blocked, which is useful to enforce company model governance rules, for instance to restrict access to certain models or organizations disallowed per company policy. Also with Network Security, admins can enable higher rate limits for their organization, and unlock power users of Hugging Face.
Support
Enterprise organization members enjoy priority support covering their usage of Hugging Face via email requests.
Enterprise Plus organization members enjoy direct expert support from the Hugging Face team via a dedicated, private Slack channel hosted by Hugging Face.
How to upgrade to Enterprise
Pricing
Enterprise and Enterprise Plus can be purchased via a 1-year contract subject to a minimum contract value. Enterprise pricing starts at $50/mo per organization member. Startups can get most Enterprise features under a Teams plan with a self-serve credit card upgrade using standard online terms. Enterprise Plus is also available as a pilot.
When purchased through a contract, Enterprise and Enterprise Plus licenses include a number of seats corresponding to the number of members expected to be onboarded in the organization during the first year of the contract. Additional members joining the organization during the yearly term are not charged, and the contract value is updated upon yearly renewal to the number of members of the organization at renewal.
Enterprise organizations can purchase Compute Credits toward usage of premium features by their members, such as Inference Providers, Inference Endpoints and Spaces premium hardware. Compute Credits can be purchased upon request via an Order Form, are applied to the organization upon payment, and are valid for one year. Compute Credits purchases of $200k or higher qualify for volume discounts. Enterprise Plus contracts include compute credits worth 5% of the annual contract value.
To contact the Hugging Face sales team, please email enterprise-contract@huggingface.co
Contracting
To keep the process fast and smooth, Enterprise and Enterprise Plus are governed by our standard online Terms of Service, complemented by brief Supplemental Terms. These terms follow industry standards and are regularly updated to ensure they remain clear and fair.
Frequently Asked Questions
Can I get on a call with a sales representative?
Hugging Face sells and onboards customers via a streamlined process relying on written async communication (email and Slack). We are happy to answer any question you may have via email, but do not offer sales calls.
Can I get a free trial of Enterprise?
Enterprise features can be tested for as little as $20 with a credit card, and we do not offer free trials.
Can I purchase Enterprise seats for only some of the members of my organization?
No - upgrading an organization to Enterprise and Enterprise Plus benefits all members of the organization, and the features are applied organization-wide. Security features like SSO, RBAC and Audit Logs need to apply to every member of the organization to work. For instance, if your organization already has 1,000 members, you can’t purchase an arbitrary number of e.g. 100 seats to only upgrade certain members.
How do I follow my internal new vendor onboarding processes?
Any vendor, security or legal review process requires purchasing Enterprise or Enterprise Plus via a contract. Enterprise contracts are signed on the standard Hugging Face template. Enterprise Plus contracts can be signed on your own paper, and include vendor onboarding and security questionnaires. Our team will be happy to follow your requirements at enterprise-contract@huggingface.co
How do I set up a security review of Hugging Face prior to purchase?
Security reviews are only possible when purchasing Enterprise or Enterprise Plus via a contract. Please contact our team at enterprise-contract@huggingface.co, upon signing a unilateral NDA, Hugging Face will share our SOC2 Type2 report detailing all the information required in security reviews. Our security team can accommodate custom security questionnaires for high contract values.
Can the standard contract terms be modified after my legal team reviews them?
Legal review is available with Enterprise Plus, where the contract can be signed on your own paper. With Enterprise, the Hugging Face legal team can review change requests to be added to the Order Form, which includes all contract legal terms, for high contract values.
Get Started
Upgrade your organization to Enterprise at hf.co/enterprise