Verified communications, on your terms.
Cloud, dedicated single-tenant, or fully self-hosted — same product, same apps, different blast radius. Pick the deployment topology your security posture demands.
Three topologies, one product.
The same Mia Relay apps and identity model across all three. What changes is where data lives, who operates the infrastructure, and who has root.
Shared multi-tenant
For teams that want the fastest possible time-to-value. Same physical infrastructure as the consumer product; logical isolation per tenant. SSO available.
- Onboarding in hours
- UK / EU data residency
- SSO (Entra ID, Google Workspace)
- Email + chat support
Single-tenant managed cloud
Your own cloud deployment in your preferred region. No shared database, no shared blob storage, no neighbours. You set the regional boundaries; we operate it.
- Single-tenant infrastructure in UK South or EU West
- SSO (Entra ID, Okta), SCIM provisioning
- Audit log export, DPA, 99.9% SLA
- Named technical contact
- Onboarding in 2–4 weeks
Your tenancy, your operations
Either inside your own AWS / Azure / GCP tenancy (BYOC: we operate, you own the cloud bill and the network boundary), or fully on-prem (you operate, we support). Source-review access for both.
- Customer-controlled deployment
- Air-gapped configurations supported
- Source-review access
- Dedicated support engineer
- Onboarding in 6–12 weeks
Customers we're built for.
UK / EU executive-protection firms
Verified comms between principal, team, advance party, residence staff and intel providers. See the EP page →
International NGOs in hostile environments
Field teams, country leads and HQ on one verified network, self-hosted in jurisdictions of their choosing. Sovereign deployment for organisations where Slack and Teams are not a credible option.
Law firms & family offices
Partners, clients, counsel and external advisors on a verified channel. No client phone numbers shared, no DM-from-unknown-prospect attack surface, audit-ready by default.
Healthcare & regulated networks
Clinician-to-clinician, clinician-to-patient, MDT discussions — on a verified network instead of WhatsApp groups that no one wants on the audit. UK data residency by default.
Security work you can actually audit.
We publish what we use, what we hold, and what's in progress. No certification theatre, no "compliance" pages that don't survive a procurement reading.
Encryption
TLS 1.3 in transit. Storage encryption at the cloud-provider tier (Azure / customer-cloud equivalents). End-to-end on private direct messages by default.
Certifications
Cyber Essentials Plus — in progress. ISO 27001 — in progress. SOC 2 Type II — in progress. We won't claim what we don't hold.
Sub-processors
Azure (compute, SQL, blob), LiveKit (real-time media), SendGrid (transactional email), Apple APNs and Firebase Cloud Messaging (push). Listed publicly on the Trust page.
Bring us a brief.
We respond to enterprise enquiries within one working day. NDA available; demo against a brief you'll recognise, not a generic walkthrough.