$10/seat/mo5 seat minimum
Every desk gets an agent.
You keep the controls.
OpenDesktop Enterprise puts the same local-first agent on every machine, governed through one managed gateway: single sign-on, hard dollar budgets, allow-list policy, and a full activity log.
Provider keys never
touch a laptop.
Every desktop signs in with company SSO and talks only to your managed gateway. The gateway holds the provider keys, applies policy and budgets, then forwards the request. What comes back gets metered and logged.
Allow-lists,
not honor systems.
Policy is an allow-list over three things: models, connectors, and skills. Scope it to the whole org or to a group. If it is not on the list, the desktop cannot use it, and the gateway would refuse it anyway.
The same policy reaches the desktop too. Menus only show what a person is actually allowed to pick.
models
connectors
skills
tom's next request returns budget_exceeded, not an invoice surprise
Budgets that fail
closed, in dollars.
Every request reserves its cost before it goes upstream. Budgets stack per org, per group, and per member, over rolling five-hour, daily, and weekly windows.
When a ceiling is hit, requests stop. When the gateway does not recognize a principal, requests stop. No allowance ever leaks past its cap.
Answer "who spent what"
without reading anyone's work.
Every request lands in the activity log: member, group, model, tokens, cost, timestamp. Metadata only. Prompt and response content is never stored by the gateway.
| time | member | group | model | cost |
|---|---|---|---|---|
| 09:14 | ana | design | gpt-4.1 | $0.0316 |
| 09:15 | luka | finance | mistral-large | $0.0089 |
| 09:15 | ivan | eng | deepseek-v3 | $0.0021 |
| 09:17 | mia | marketing | gpt-4.1 | $0.0198 |
| 09:18 | tom | marketing | budget_exceeded | |
Identity your IT team
already trusts.
sso
Sign-in runs through WorkOS, so your existing identity provider and directory come along. Roles and memberships live with the org.
desktop sign-in
The app signs in like a proper native app: system browser, PKCE, loopback redirect. No passwords typed into an Electron window.
groups
Members belong to groups, and groups carry their own policy and budgets. Finance and Design do not need the same rules.
local privacy
Files stay on each machine and tools run in a local sandbox. The gateway sees requests and metadata, not the desktop.
Roll out an agent to the whole org this quarter.
$10/seat/mo · 5 seat minimum · cancel anytime