01
Isolated by organisation
Each organisation's documents, knowledge network and conversations live in their own isolated scope. There is no shared corpus and no cross-tenant retrieval.
Private by design. Certified in practice.
Marella exists for organisations that can't gamble with their information. Here is exactly how it earns that trust — and what stays in your hands.
Safe AI is a shared arrangement
We take care of the platform's guarantees. You keep the decisions that should never leave your organisation.
We ensure
- Your data is isolated to your organisation
- Your documents are never used to train shared models
- Encryption in transit and at rest
- Role-based access control on every surface
- A complete audit trail of questions, answers and access
- UK-based company, team and support
You define
- Who belongs to which department, and what they can see
- Which document sets each agent may answer from
- The skills, templates and tone of your agents
- Your ontology — the concepts and entities that matter
- Retention and disposal rules for your material
- Where Marella runs: our cloud or your private deployment
Standards you can put in a procurement pack
ISO
27001 · Security
ISO
9001 · Quality
CE
Cyber Essentials
UK
Based & hosted
GDPR
UK GDPR aligned
99.9%
Uptime SLA
Held by OpenKit Ltd: ISO 27001:2022 (UKAS-accredited, certificate no. 24112), ISO 9001:2015 and Cyber Essentials. Certificate scope, data processing terms and security documentation are shared during procurement — ask and they're yours.
How it holds up
02
Cited, or it doesn't count
Answers must point at your sources. That's a security property as much as a quality one: you can always establish where information came from.
03
Access follows your org chart
Departments, roles and permissions decide who can ask what of which documents. People see what they're cleared to see — the same rule your filing system already follows.
04
Everything leaves a trail
Decision traces record what the AI did and why — which agents ran, which sources were used, what was checked. Security events land in an immutable audit log. When compliance asks 'what happened here?', the answer is a lookup, not an investigation.
05
Your data is not the product
Documents are processed to serve your organisation's answers — not to train shared or third-party models. Your knowledge asset stays yours.
06
Deployment on your terms
Run on our UK-hosted cloud with a 99.9% uptime SLA, or talk to us about private deployment inside your own environment.
Questions security teams ask
Is Marella ISO 27001 certified?
Yes — OpenKit Ltd, the company behind Marella, holds ISO 27001:2022 certification for information security management (UKAS-accredited, certificate no. 24112), alongside ISO 9001:2015 and Cyber Essentials. Certificate scope is available on request during procurement.
Will our documents be used to train AI models?
No. Your documents are processed to answer your organisation's questions and build your private knowledge network. They are not used to train shared or third-party models.
Where is our data hosted?
OpenKit is UK-based and Marella's managed cloud is UK-hosted. For organisations with stricter requirements, private deployment options are available.
How does Marella prevent hallucinated answers?
Answers are grounded in retrieval from your own documents and carry citations to the exact source passages. Where the documents don't support an answer, Marella says so rather than guessing.
Can we control who sees what?
Yes. Departments, roles and permissions scope both documents and agents. Access decisions sit with your administrators, and every access lands in the audit trail.
How do we get security documentation for procurement?
Talk to us. We support security questionnaires, DPIAs and procurement reviews, and can walk your security team through the architecture directly.
Bring your security team
The fastest way to trust Marella is to interrogate it. We'll walk your security and compliance people through the architecture, live.
Private by design · ISO 27001 · Built in the UK