3 of the 16 capabilities tracked on both differ, mostly in Enterprise.
| Measure | Document360 | GitBook |
|---|---|---|
| Starts at | Sales-gated | Free, then $65/seat/mo |
| Charged per | Not published | Each agent seat |
| AI billed at | Not published | $12 per seat |
| Included, where the other says no | 2 capabilities | 0 capabilities |
3 of the 16 capabilities tracked on both products differ.
| Capability | Document360 | GitBook |
|---|---|---|
| Shared inbox | Not published | NoThere is no inbox. The nearest thing is Channels on Ultimate, which put the Assistant and the writing Agent into Slack, GitHub and Linear, and comments on content blocks. Neither routes customer email. |
| Ticket queues | Not published | NoNo queues, no assignment, no statuses. Change requests are a content review workflow, not a work queue: they branch, collect review and merge. |
| Capability | Document360 | GitBook |
|---|---|---|
| Workflow builder | IncludedListed in the feature inventory alongside approval stages and review reminders. Plan gate Unknown, and the configuration does not survive an export. | Not published |
| Capability | Document360 | GitBook |
|---|---|---|
| Autonomous resolution agent | Not published | NoNo ticket object exists in GitBook, so nothing can be autonomously resolved. The Assistant has no handoff path to a human queue and no case to leave behind. A support team running GitBook keeps its help desk for anything the docs do not answer. |
| Resolution over knowledge base | Paid add-onThe AI Chatbot Add-on answers from the knowledge base, websites, files, FAQs and Zendesk or Freshdesk tickets. Sold separately at an unpublished price. | IncludedUltimate, metered at 500 successful answers a month. The Assistant answers readers on the docs site or inside an embed, and connections extend it to GitHub, YouTube and other sources. It answers a person; it does not close a ticket, because there is no ticket. |
| Capability | Document360 | GitBook |
|---|---|---|
| Public help center | IncludedPublic, private or mixed knowledge bases are all supported. Which model a plan allows is one of the six quote inputs, so the gate exists and is unpublished. | IncludedAll plans, including Free. Unlimited basic sites are free and page views are uncapped on every tier. A custom domain requires Premium. |
| Custom domain | Not published | IncludedPremium and above. A custom subdirectory such as example.com/docs, set up through Cloudflare or Vercel, needs Ultimate. |
| Multi-brand | IncludedPublished as workspaces. The number of workspaces is a stated quote input; the per-plan allowance is Unknown. | IncludedTwo mechanisms with different gates. Publishing several sites works on any plan and each site carries its own fee. Consolidating several products into one site with sections and groups requires Ultimate. |
| Versioning | Not published | IncludedAll plans. Version history covers viewing, sharing and rolling back to any previous version, alongside change requests and preview deployments. This is the strongest part of the product and it is not gated at all. |
| Localization | IncludedMulti-language workspaces plus a Crowdin integration for translation. Languages are a stated quote input, so the allowance is plan-gated and unpublished. The supported content-language count is Unknown; the portal UI ships in English, Brazilian Portuguese, French, Spanish and German. | IncludedSite variants publish multiple spaces on one site for localization on every plan, so manual translations are free. Machine translation that stays in sync is the paid Translations add-on, $25 a month for 50,000 words on Premium and included on Ultimate. |
| Article analytics | Not published | IncludedPage view analytics on all plans. Search analytics and page ratings require Premium. AI insights, which show how the Assistant answered and where the docs fall short, require Ultimate. |
| In-product widget | IncludedPublished as a Support Ticket Deflector. Plan gate Unknown. | IncludedUltimate. Docs Embed puts the Assistant, scoped search and a docs browser into your own product through a script tag, an npm package or React components. Not available on Free or Premium. |
| SEO controls | Not published | IncludedMeta information, sitemap and responsive design are handled on all plans. Opting out of search indexing and private share links require Premium. LLM optimizations (llms.txt, llms-full.txt and .md versions of every page) and an auto-generated MCP server ship on every plan including Free. |
| AI answers over KB | IncludedEddy AI covers AI Search and Answer, AI Content and FAQ Creation, an AI Writing Agent, an MCP server, auto-generated glossaries and duplicate content detection. Described as included with your plan, with no plan named. | IncludedTwo tiers of it. AI search, which returns a short answer in the search box, starts at Premium. GitBook Assistant, the full chat sidebar with agentic retrieval over the current page and prior conversations, is Ultimate-only. |
| Capability | Document360 | GitBook |
|---|---|---|
| Approvals | Not published | IncludedPremium and above. "Review & approve edits" and merge rules, which set requirements a change request must meet before it can merge, both start at Premium. Editors can create change requests on any plan but cannot merge them; reviewers can. |
| Capability | Document360 | GitBook |
|---|---|---|
| SAML SSO | IncludedUnknown. A dedicated SSO and SCIM feature page exists, and the pricing FAQ names SSO and security needs as one of six quote inputs, which confirms a gate exists without saying where it falls. | IncludedEnterprise only, and priced by quote. SAML 2.0 against any compliant IdP, with JIT provisioning on first login. Google and email-domain SSO, which admits anyone with a matching verified domain as a guest, is on every plan including Free. Admins can always sign in by non-SSO methods even with Enforce SSO on, deliberately, to prevent lockout. |
| SCIM provisioning | IncludedUnknown. Documented on the same SSO and SCIM feature page. | Not publishedSCIM appears nowhere in the SSO documentation, the plan comparison table or the API reference. The provisioning that is documented is just-in-time creation on first SAML login, and deprovisioning explicitly does not happen: "Removing a member from the IdP will prevent the user from being able to sign in to the corresponding GitBook account, but will not remove the account from GitBook." Since every account bills at $12, an IdP removal that leaves the seat in place keeps charging. |
| Role-based access control | IncludedUnknown. Access to product features and data is governed through role-based access control aligned to the principle of least privilege. | IncludedBasic roles (admin, creator, editor, reader) on all plans. Reviewer and commenter require Premium, which also unlocks teams. Team owners, meaning delegated management of a team, is Enterprise-only. Permissions cascade from organization to collection to space. |
| Custom roles | IncludedUnknown. Published as Roles and Permissions. Three non-full roles are defined: reader accounts for private knowledge bases, reviewers and editors. None carries a published price. | NoThe seven roles are fixed: guest, reader, commenter, editor, reviewer, creator, admin. No documentation describes defining a role or editing a permission set, and each role's capabilities are enumerated by the vendor rather than configured. |
| Audit logs | IncludedUnknown. Trust center: user and system activities are logged to support monitoring, investigations and audit requirements. No export path is documented. | IncludedEnterprise only, and API only. List organization audit events and Get an organization audit event require an organization admin and an active Enterprise plan. No audit log UI or export file is documented for any published price. |
| IP allowlist | IncludedUnknown. Published as IP restriction in the security feature inventory. | IncludedEnterprise, and narrower than the name suggests. It allowlists GitBook's five outbound Git Sync IPs so a locked-down GitHub, GitLab or internal network will accept them. It does not restrict which IPs may reach the GitBook app or a published site. |
| HIPAA / BAA | Not publishedNot claimed on the security page, the pricing page or the trust center, and no Business Associate Agreement is referenced anywhere. | NoNo HIPAA claim and no Business Associate Agreement is mentioned on the healthcare industry page, the security industry page, the pricing page or the privacy statement. The healthcare page answers the compliance question with SOC 2, SSO and granular permissions. |
| SOC 2 | IncludedAll plans. "All plans are SOC 2 Type II compliant." | IncludedAll plans. The pricing comparison lists "ISO 27001 & SOC 2 certified" as included on Free, Premium, Ultimate and Enterprise. SOC 2 Type II specifically. The reports themselves are sales-gated: "see the full ISO 27001 or SOC 2 reports? ... please reach out to our sales team". |
| ISO 27001 | IncludedUnknown. The trust center lists ISO 27001 Information Security Management System certification. | IncludedAll plans. ISO/IEC 27001 certified, announced alongside the SOC 2 Type II attestation. |
| GDPR | IncludedUnknown. Marketed as GDPR ready; the trust center states that Document360 supports customer compliance with the EU General Data Protection Regulation. | IncludedNo gate. "If you're visiting us from the EU, please see our global privacy practices: we are compliant with the General Data Protection Regulation (GDPR)." Data is nonetheless processed in the United States. |
| Data residency | IncludedCustomer-selectable. "Pick your datacenter region for performance and data-residency compliance." The available regions are not listed anywhere, so which countries are on offer is Unknown. | No"We store and process the information that we collect in the United States." No EU region, no region picker and no residency commitment appears on any plan, Enterprise included. Subprocessors may store and process outside the United States and are not enumerated on the pages read. |
| Right-to-erasure tooling | Not published | IncludedNo gate. Account deletion is self-serve from the user profile, "barring legal requirements, we will delete your full profile (within reason) within 90 days", and consent-based data erasure can be requested from support within 30 days. Inactive accounts are never auto-deleted. |
| Capability | Document360 | GitBook |
|---|---|---|
| REST API | IncludedUnknown. A REST API programmatically creates, updates, retrieves and deletes articles, categories and users; tokens are generated from portal settings. | IncludedNo gate stated. A large OAuth-scoped REST API at api.gitbook.com covering organizations, members, spaces, page content and revisions, sites, site customization, redirects, permissions, search, insights and Ask AI questions. Audit events are the one Enterprise-gated family. |
| Webhooks | Not published | IncludedNo gate stated. Delivered through the integrations platform rather than as a settings-page feature: an integration receives webhook notifications and can handle arbitrary HTTP requests. A generic webhook integration is also listed in the directory. |
| SDKs | Not published | IncludedNo gate. An official Node.js client library, a GitBook CLI for driving docs workflows from scripts or coding agents, and a published SKILL.md so AI coding assistants understand GitBook blocks. |
| App framework | Not published | IncludedNo gate stated. A React-inspired platform (ContentKit) for building custom blocks and integrations that run inside GitBook, with OAuth flows, event handling, a manifest file, local development and public or private publishing. |
Both entries last checked Sep 9, 2026.
5 of 9 not published by Document360, checked
4 of 9 not published by GitBook, checked