Skip to content

Deployment

Run Marella managed, in your cloud or on your own servers

Each option changes where your data goes, which suppliers process it and who runs each control. We write that down for your deployment before any documents move.

Three ways to deploy

What each option covers

New to the terms? Read what private AI means or how on-premise and self-hosted differ.

Run by us

Managed

We host and run it. Storage region, model provider and support terms are agreed with you in writing.

Agreed before you sign

  • Storage and inference region
  • Identity and access configuration
  • Operations and support owner
  • Backup, recovery and incident terms

In your account, run jointly

Your cloud

Marella AI can be deployed into a customer-controlled cloud environment after architecture review.

Agreed before you sign

  • Cloud account and network boundary
  • Model provider
  • Who runs what, in writing
  • Monitoring, recovery and support access

Your servers, including on-premise

Self-hosted

A self-hosted deployment package is available; prerequisites and responsibilities are agreed during architecture review.

Agreed before you sign

  • Infrastructure and model prerequisites
  • Update and vulnerability process
  • Customer-operated backup and monitoring
  • Support route and permitted access

Data-flow review

Trace more than the original file

Your files are not the only copy. Review the text extracted from them, what is sent to the model, and the logs and backups as well.

  1. D1

    Source material

    Original files, connected records, versions, deletion and access changes

  2. D2

    Derived content

    Parsed text, page coordinates, chunks, metadata, embeddings and extracted structures

  3. D3

    Inference

    Queries, retrieved context, prompts, model/provider requests and generated outputs

  4. D4

    Operations

    Identity events, decision traces, security events, logs, support access, backups and recovery copies

Who does what

Put an owner beside every control

For each one, write down who sets it up, who runs it and who signs it off: sign-in, storage, models, patching, monitoring, backups, incidents, deletion and support.

What these labels do not prove

  • Self-hosted does not automatically mean air-gapped, zero-egress or customer-operated in every respect.
  • Customer cloud does not automatically establish data sovereignty or eliminate vendor support access.
  • Managed does not mean one region or one service level for everybody.
  • A demo environment tells you nothing about security or recovery in production.

Deployment questions

What do we need for an architecture review?

The workflow, the kinds of data involved, where data may be held, your approved cloud and model providers, your identity and network policy, and who would operate the deployment.

Is Marella always hosted in the UK?

No single region applies to every customer. Where data is stored depends on the deployment you choose, and we state it in writing during review.

Does self-hosted mean air-gapped?

Not by default. Cutting a deployment off from the internet means designing and testing its network, model access, updates, licensing and support route for that.

Who runs backups and incident response?

That depends on the deployment. The order form and responsibility matrix name who owns each, how they get access, the recovery expectations and how issues are escalated.

Can the architecture change after evaluation?

Yes, but changing where data is stored, how people sign in, which model runs or who operates it means re-testing security, performance and support.

Plan the deployment before any documents move

Keep the first message non-confidential. We agree a secure route for diagrams, questionnaires and sample documents afterwards.