Governed AI agents,
inside your company's perimeter.
PromptOps becomes the company environment for orchestrating coding agents: licenses, users, teams, policies and AI tools managed centrally. Three models, all ready: SaaS with a perimeter on Microsoft Entra ID, installation on your own instance, or a cloud workstation where agents run on a server and your team works from anywhere.
Three models
Choose where PromptOps runs
Same app, same agents, same control. What changes is where the servers live and where the agents run.
Your company identity is the perimeter
PromptOps on our EU cloud, open only to users from your Microsoft Entra ID tenant.
- Microsoft Entra ID sign-in only, SSO enforced on company domains
- Users, teams and roles managed from the Microsoft portal with SCIM
- No server installation, updates handled by us
- Up and running in a few days
PromptOps on your own instance, on-premise or cloud
Compiled, encrypted software installed client-server on your infrastructure.
- Server on your instance: data center, AWS, Azure or GCP
- Compiled, encrypted build tied to your license
- Updates included, validated before rollout
- Perpetual license, no per-seat fees
Agents work on a server, you work from anywhere
PromptOps set up on a cloud server with repositories, toolchains and agents. Your team works on client projects from anywhere, even on lightweight machines.
- Microsoft Entra ID sign-in: on our cloud (SaaS) or on your own server (on-prem)
- Agent sessions running 24/7, even with the laptop closed
- A lightweight laptop, a thin client or a phone is enough
- Projects with clients and partners without copying code onto laptops
Comparison
Enterprise SaaS, Self-hosted or Cloud workstation
The features are the same: infrastructure, where agents run, timeline and license model differ.
| Enterprise SaaS | Self-hosted | Cloud workstation | |
|---|---|---|---|
| Where the servers run | PromptOps cloud in the EU (Milan) | Your instance, on-premise or in your cloud | Dedicated server: PromptOps EU cloud or your infrastructure |
| Company perimeter | Entra ID tenant and verified company domains | Your network and infrastructure, plus SSO | Entra ID tenant (SaaS) or your network (on-prem) |
| Sign-in | Microsoft Entra ID SSO enforced | Microsoft Entra ID, Google Workspace or SAML SSO | Microsoft Entra ID SSO, from anywhere |
| Installation | None on the server side | Compiled, encrypted client-server build | Server set up by us: repositories, toolchains and agent CLIs |
| Updates | Automatic, handled by us | Included, packages validated before rollout | Included, handled by us |
| Agent policies, SCIM, Intune, SIEM | ✓ | ✓ | ✓ |
| Code and prompts | Only to the AI providers you choose | Only to the AI providers you choose | Stay on the server, sent only to the AI providers you choose |
| Time to go live | A few days | 3 weeks | 1-3 weeks |
| License | Yearly company contract | Perpetual, no per-seat fees | Yearly contract, server included or your own |
IT control
Governed by your IT team
IT sets the rules once, the app enforces them on every machine, and every action leaves a trail.
Agent policies
Allowed AI providers, sub-agent spawning, provider switching, auto-approval and plugin installs decided for the whole organization and enforced by the app after sign-in.
Deploy with Intune / MDM
The desktop app reads an IT-managed configuration (Windows policy, macOS profiles, system files): your backend address, HTTPS only, Microsoft sign-in only.
Events to your SIEM and Teams
Organization events are sent to your SIEM (e.g. Microsoft Sentinel) through a signed webhook and to a Microsoft Teams channel.
Exportable activity log
Every admin and member action is logged, visible in the console and exportable as CSV or JSON for audit and retention.
FAQ
Frequently asked questions
Which model is right for us?
If limiting access to your company identity is enough and you want to start right away, Enterprise SaaS. If the servers must live in your network or your cloud account, Self-hosted. If you want agents to run on a server while your team works from anywhere, even on lightweight machines, Cloud workstation.
Can we start with SaaS and move to Self-hosted?
Yes. The app is the same and the organization's configuration (policies, allowed providers, plugins) carries over to your instance.
Who pays the AI providers (Claude, OpenAI, Gemini…)?
Your company, directly to the provider, with your own accounts or API keys. PromptOps is not a reseller and adds no markup on model usage.
Does the public app stay free?
Yes. PromptOps stays free for anyone who downloads it. Enterprise is a separate contract for companies.
Let's talk
Request a call with the Enterprise team
Fill in the fields: your email client will open with the message ready to send. We reply within one business day.
PromptOpsspinoff by