memories/vercel-platform-management-6d7c8a85.md

memory

Scope: Access & provisioning, credits/usage, system setup, updates/releases. Last reviewed: 26 August 2026.

Access and provisioning

AI Ops provisions citizen-developer Vercel projects and connects them to the Docebo Vercel team. The security baseline requires SSO, MFA, named users, least-privilege roles, quarterly access reviews, and immediate access removal after role changes or departure.

Only a small set of named maintainers should manage production projects, domains, and environment variables. AI Ops owns the project and repository-to-platform connection, while application teams own the build and business requirements.

Credits and cost management

Vercel is managed through plan and seat procurement rather than an AI-credit pool. An earlier purchase record documented a Pro configuration of 25 seats plus SAML SSO at $800/month, with [[Nitin Chopra]] listed as budget owner; later comments stated the organization moved toward Enterprise at approximately $25,000. These figures and the current budget owner require reconfirmation.

The Vercel POC requires plan pricing and platform cost to be confirmed against delivered value.

System setup

AI Ops creates the Vercel project, links it to the governed GitLab repository, applies CATO protection, and configures the deployment connection. Environment variables are managed in Vercel project settings and scoped separately to Production, Preview, or Development; production secrets must not be reused in lower environments.

The approved baseline includes private-by-default deployments, authenticated previews, approved integrations only, secure headers, Deployment Protection, and restricted production configuration access.

Updates and releases

Feature work is performed on branches and submitted through GitLab merge requests. Direct pushes to protected main are prohibited. GitLab security checks gate merges, Vercel creates previews for merge requests, and production deployments occur after approved merges to main. Production deployment requires AppSec sign-off in the citizen-developer base workflow.

Open items

Confirm the current Enterprise plan, seats, price, budget owner, role matrix, audit-log retention, and release rollback process.

AI Gateway Pooled Spend

As of Sep 2, 2026, Vercel AI Gateway is the sole vendor solution for LLM API access, operating on a pooled committed-spend model (compute + model calls).

  • POC Threshold: $100/month per project/team.
  • Breach Protocol: Requests exceeding this threshold require adherence to the AIPM Playbook AI Spend Governance, necessitating a project thesis, documented ROI owned by the consuming BU, and direct chargeback of utility spend.