Three reasons teams look at Trinito
- No endpoint agent. Trinito installs nothing on staff Macs, PCs, phones, or tablets. No Intune rollout, no per-seat agent licence, no visibility gap when someone buys a new laptop.
- Bring your own LLM keys. OpenAI, Anthropic, Google, Ollama Cloud, or a local model on the box — the customer chooses and uses their own accounts. Redacted prompts go direct from the appliance to the provider.
- UK SMB plug-and-play. Buy the appliance, plug it in, create user accounts, staff use the Trinito chat. No Microsoft admin console expertise required for the basic deployment.
Structural comparison
| What you're solving | Microsoft Purview | Trinito AI Gateway |
|---|---|---|
| Where policy lives | Per-endpoint agent — each Mac, PC, iPad, and phone needs configuration | Single appliance on the LAN |
| Where staff interact | Existing apps (Outlook, Word, Teams, browser) intercepted by the endpoint agent | The Trinito chat — staff use it as their AI workspace |
| Where redaction happens | Endpoint agent processes locally | Appliance processes centrally for the organisation |
| What's covered | Microsoft 365 surfaces — email, SharePoint, OneDrive, Teams, Copilot | AI prompts and uploaded documents that go through the chat |
| Licensing | Microsoft 365 E5 (or equivalent add-ons) per seat | Single appliance + monthly LLM allowance or BYO keys |
| Deployment | Microsoft admin console, DLP policy authoring, endpoint rollout via Intune/MDM | Appliance on the LAN, user accounts, model routing in admin |
| Third-party LLMs (ChatGPT, Claude, Gemini) | Requires Edge for Business + Entra on covered endpoints | Redacted prompts from the appliance to the provider you configure |
| UK detector pack | UK detectors via custom DLP configuration | Built-in builtin-uk-v1 pack out of the box |
| Audit logs | Microsoft tenant retention | Hash-chained on your appliance — export on demand |
| Best for | Customers fully invested in Microsoft 365 with enterprise IT | SMB and mid-market firms needing AI prompt redaction specifically |
Who has Purview AI features
| M365 plan (typical SMB) | Purview AI / third-party LLM DLP |
|---|---|
| Business Basic / Standard | Not included — upgrade or add-on required |
| Business Premium | Available as paid add-on (not in base price) |
| E3 | Add-on for advanced AI DLP features |
| E5 | Included — the plan Purview marketing assumes |
If you are not on E5 (or have not bought the add-on), Purview's AI story is not something you can switch on tomorrow.
These products do different jobs
Purview is a data loss prevention layer for the Microsoft 365 surface. If your concern is stopping client lists leaving via Outlook or Teams, Purview is built for that — integrated with everything Microsoft.
Trinito is a redaction layer for AI prompts. If your concern is staff pasting client data into ChatGPT or legal won't let you send PII to Claude, Trinito is built for that — no Microsoft licensing required, works with whichever AI provider you choose.
Many customers benefit from both. Trinito does not replace Purview's email and SharePoint coverage; Purview does not redact prompts before they reach the LLM provider.
Cost comparison (illustrative — 30 users, three years)
| Purview path (E5 uplift) | Trinito Standard (indicative) | |
|---|---|---|
| Year 1 | ~£30–40 × 30 users × 12 ≈ £10,800–14,400 uplift alone | ~£1,499 hardware + ~£948 Trinito Cloud |
| Years 2–3 | Same per-seat recurring | Monthly + optional overages; hardware owned |
| Order of magnitude | Higher recurring OPEX | Roughly one tenth the per-user cost for comparable third-party LLM egress control |
Your numbers will differ — this table is for board-level framing, not a quote. See pricing and request a quote.
When Purview is the right answer
You are already on E5, standardised on Edge for Business, Entra ID everywhere, and your AI risk is mostly Copilot inside M365. Purview extends what you already bought.
When Trinito is the right answer
You are on Business Standard or below, use mixed browsers and phones, run Google Workspace or Mac-heavy, need on-prem audit logs, or want frontier LLMs with UK-side inspection without an E5 uplift. See also vs SaaS prompt-firewalls.