Niova
For Microsoft 365 organisations

Ship apps to your Intune, from one place.

Niova takes the heavy lifting out of Microsoft Intune app delivery. Connect your Microsoft 365 tenant, upload a package once, and deploy it to your Intune — with integrity checks, secret-expiry alerts, and a full audit trail.

14-day trial · no credit card · federate to Entra when you convert
ui.niova.app/dashboard
Dashboard
Active deployments
3
Customer tenants
12
Secrets expiring
2
Google Chrome 124
Contoso Ltd
Deploying
7-Zip 23.01
Fabrikam Inc
Deployed
Zoom Workplace
Tailwind Traders
Deployed
Built on the Microsoft stack you already run
Microsoft IntuneMicrosoft Entra IDMicrosoft GraphMicrosoft 365Windows
What you get

Everything the Intune-app workflow needs — and nothing it doesn’t.

Integrity-checked uploads
Drop an .intunewin. Niova verifies magic-bytes, size, and SHA-256 client- and server-side before anything ships.
Deploy to your Intune
Push a package to your organisation’s Microsoft 365 / Intune through a Graph $batch flow — your credentials behind a dedicated KMS key, never shared.
Full audit trail
Every upload, deploy, and credential rotation is logged and exportable for your own compliance reviews.
Secret-expiry alerts
See when your Entra client secret is about to lapse and break the integration — before it bites.
Test Integration battery
Connect your tenant and Niova runs a check battery against Microsoft Graph so you know it works before you deploy.
Least-privilege by design
No ingress to your network. Niova calls Graph from its own AWS account using minimum-necessary permissions.
How it works

From package to deployed, in four steps.

01
Connect your tenant
Grant Niova consent and a client secret in your Entra tenant. No agents, no network ingress.
02
Upload a package
Drag in an .intunewin. Niova integrity-checks it before it touches Intune.
03
Deploy via Graph
Niova pushes to Microsoft Intune through a Graph $batch flow with live status.
04
Audit & repeat
Every action is logged. Re-deploy or roll out the next app in a click.
Why Niova

A focused tool for the job, not a platform tax.

Broad EUC suites bundle Intune deployment as one feature among dozens. Niova does the one thing IT teams do every day — and does it end-to-end.

Narrow and deep
Intune app delivery is the whole product, not one tab in a sprawling platform. The deploy path is the kernel.
AWS-hosted, region-aware
Hosted in ap-southeast-2 (Sydney) with APAC DR, and region expansion driven by your residency needs.
PSADT wrap pipeline
Wrap .exe / .msi installers into a repeatable .intunewin with a parameterised PSADT template — on the roadmap.
Pricing

Start free. Pilot at no cost. Scale when it’s real.

Trial
Free
14 days · no card
Your Microsoft 365 tenant
Unlimited deploys
Integrity checks + audit log
Email support
PilotDesign partners
£0
during Phase-1 pilot
Unlimited apps & deploys
Test Integration battery
Secret-expiry alerts
Pilot-risk acknowledgement
Priority support
Scale
Let’s talk
for larger rollouts
Everything in Pilot
Custom app catalogue
SSO + custom data region
SOC 2 (Type 1, roadmap)
Onboarding + TAM
FAQ

The questions IT teams ask first.

Where is my data hosted?
Niova runs on AWS in ap-southeast-2 (Sydney) with an APAC DR region, and your credentials sit behind a dedicated KMS key. Region expansion is driven by your residency requirements.
Do I need to install anything in my tenant?
No. There’s no agent and no network ingress. You grant Niova consent and a client secret; all Microsoft Graph calls originate from Niova’s own AWS account.
Do you integrate with our ticketing / ITSM?
Today Niova exposes a clean webhook + audit-log export so you can wire ticket creation downstream of deploy events. Native ITSM integrations follow as customers ask for them.
Are you SOC 2 compliant?
Pilot customers sign a pilot-risk acknowledgement; audit logging, per-tenant KMS, and tenant-scoped IAM are already in place. SOC 2 Type 1 readiness is on the roadmap.
What platforms do you support?
Windows x64 today, delivering full installs via .intunewin. AppX/MSIX and CloudAttach (streamed app-attach for AVD / Windows 365) are on the roadmap; ARM, macOS and Linux are out of the current window.

Deploy your first app in your trial today.

Spin up a workspace, connect a tenant, and ship an .intunewin — all in the free trial. No card, no agent, no call required.