Scoped to your requirements
Managed
We host and run it, and agree the configuration with you.
Agree before you sign off
- Storage and inference region
- Identity and access configuration
- Operations and support owner
- Backup, recovery and incident terms
Deployment
Managed, customer-cloud or self-hosted: choose the deployment you can review
Those three words are only a starting point. What matters is where each kind of data goes, which supplier processes it and who runs each control.
Three ways to deploy
What each option covers, and what still needs deciding
After an architecture review
Customer cloud
Marella AI can be deployed into a customer-controlled cloud environment after architecture review.
Agree before you sign off
- Customer account and network boundary
- Selected model/provider path
- Shared responsibility matrix
- Monitoring, recovery and support access
A package exists; we agree what you need to run it
Self-hosted
A self-hosted deployment package is available; prerequisites and responsibilities are agreed during architecture review.
Agree before you sign off
- Infrastructure and model prerequisites
- Update and vulnerability process
- Customer-operated backup and monitoring
- Support route and permitted access
Data-flow review
Trace more than the original file
A proper review follows the copies too: the text pulled out of the files, what gets sent to the model, and the backups and logs.
- D1
Source material
Original files, connected records, versions, deletion and access changes
- D2
Derived content
Parsed text, page coordinates, chunks, metadata, embeddings and extracted structures
- D3
Inference
Queries, retrieved context, prompts, model/provider requests and generated outputs
- D4
Operations
Identity events, decision traces, security events, logs, support access, backups and recovery copies
Who does what
Put an owner beside every control
For each one, write down who sets it up, who runs it and who signs it off: sign-in, storage, models, patching, monitoring, backups, incidents, deletion and support.
What these labels do not prove
- Self-hosted does not automatically mean air-gapped, zero-egress or customer-operated in every respect.
- Customer cloud does not automatically establish data sovereignty or eliminate vendor support access.
- Managed does not mean one region or one service level for everybody.
- A demo environment tells you nothing about security or recovery in production.
Deployment questions
Is Marella AI always hosted in the UK?
No universal region is advertised. Data location depends on the selected managed, customer-cloud or self-hosted architecture and is stated during review.
Does self-hosted mean air-gapped?
Not by default. Network egress, model access, updates, licensing, telemetry and support routes must be designed and tested for the required environment.
Who operates backups and incident response?
That changes by configuration. The order form and responsibility matrix should name the owner, coverage, access route, recovery expectations and escalation process.
Can the architecture change after evaluation?
It can be reviewed, but a change in storage, identity, model, network or operator boundary creates new security, performance and support assumptions that require validation.
Map the boundary before moving documents
Keep the first message non-confidential. We agree a secure route for diagrams, questionnaires and sample documents afterwards.