Your decks never leave your control.
Pretty is an orchestration layer, not a data processor. Deploy it inside your perimeter or take it as a managed service - either way, customer content moves directly from the endpoint to the contracted AI provider.
AI providers
Bring your own keys
Customer Microsoft tenant
Azure
Entra ID
IntunePretty
Account & access management
Endpoint deployment
PowerPoint add-in on managed workstations
Provisioned alongside Microsoft 365 across your end-user fleet.
- Shipped through your existing endpoint management - Intune, Jamf, or MSI.
- The open-core runtime runs locally on each workstation - no orchestration server.
- Slides and prompts go straight to your AI provider - never through Pretty.
Deploy entirely inside your perimeter.
Runs inside your own Microsoft tenant, alongside Microsoft 365. Slides and prompts move directly between the endpoint and your AI provider - Pretty handles only account and access, never the data.
Built to clear an enterprise security review.
Source-available architecture
The core runtime is published under an open license, so security, legal, and compliance teams can review the full code path before any deployment decision.
Customer-owned credentials
Each tenant brings its own provider contracts and API keys. Pretty does not hold credentials or proxy provider requests originating from the endpoint.
No content retention
Prompts, slides, and uploads remain on the endpoint or inside your infrastructure. Pretty does not persist, log, or train on customer content.
Verifiable request trail
Every model request carries a deterministic client-side identifier you can reconcile against your DLP, proxy, or egress logs.
Two ways to deploy. Both keep content off our infrastructure.
Self-hosted
Open core, your perimeter
- Deployed inside your VPC, on-premises, or dedicated cloud
- Compute, storage, and egress remain under your control
- No external runtime dependency on Pretty
- Open-core repository available for review and modification
- Suitable for air-gapped and regulated environments
Managed service
Operated for you, on contract
- Operated by Pretty against an enterprise SLA
- SSO, SCIM provisioning, and tenant-scoped audit logging
- Consolidated provider procurement under a single contract
- Per-seat pricing without per-token reconciliation
- Endpoint payloads still transit directly to the AI provider
Security by design.
ISO 27001
In progressISO 27001 certification is in progress. We are formalizing the security controls already established across our stack, with full certification expected by mid-2026.
GDPR
CompliantBuilt to the GDPR - the world's strictest data-protection standard. Built and hosted in Europe, your data stays under EU jurisdiction.
Discuss your compliance requirements.
On-premises deployments, dedicated cloud, MSA and DPA review, HIPAA and SOC 2 paths, and procurement through Microsoft AppSource or Azure Marketplace.
Contact enterprise sales