Cloud
Pebble-hosted, multi-tenant with per-user isolation. Fastest way to get a governed workspace live.
- ✓ Full PebbleChat, Canvas, LiveApps & Shortcuts
- ✓ Bring your own models & keys
- ✓ PebbleObserve usage & cost logs
- ✓ Entra SSO & SCIM
Private Cloud
Deployed inside your own VPC. Your data and credential vault stay in infrastructure you control.
- ✓ Everything in Cloud
- ✓ Runs in your VPC — data never leaves
- ✓ SharePoint Online & Server document stores
- ✓ Managed credentials & sandbox libraries
- ✓ Local model providers (Ollama)
On-prem / air-gapped
Fully on your hardware, including disconnected environments. For the strictest residency requirements.
- ✓ Everything in Private Cloud
- ✓ On-prem SharePoint Server via Kerberos
- ✓ Air-gapped deployment supported
- ✓ Named deployment & support engineer
All tiers include role-based access, capability rollout controls, and the full audit trail. Model and token spend is billed by your providers — Pebble never marks it up.
Questions procurement always asks
Do we pay a markup on model tokens?
No. You connect your own API keys, Bedrock, managed subscriptions, or a local endpoint. Pebble governs and routes that spend — it doesn't resell it.
Can we move between deployment tiers later?
Yes. Teams often start in Cloud to prove value, then move into their own VPC or on-prem as governance requirements firm up.
How is usage attributed for chargeback?
PebbleObserve breaks down usage and cost per model, key, MCP server, and user — with a self-service usage page each person can see.