OFFICELABS LIMITED

Klyra Sovereign

Klyra Sovereign is a sovereign AI platform deployed to customer-controlled infrastructure. It provides secure AI chat, document intelligence, meeting transcription, and workflow automation while ensuring data never leaves the organisation’s environment. The service enables compliant AI adoption for organisations requiring full data sovereignty and operational control.

Features

• AI chat assistant using organisational knowledge
• Document intelligence with retrieval augmented generation (RAG)
• Secure document ingestion and knowledge base management
• AI-driven summarisation and content generation
• Workflow automation triggered by AI actions
• User and access management controls
• Deployment to customer-controlled infrastructure environments
• Ongoing software and model updates via subscription
• Meeting transcription across supported conferencing platforms

Benefits

• Use AI securely while retaining full control of organisational data
• Improve productivity without exposing information to external AI services
• Query organisational knowledge quickly using natural language
• Extract insights from documents without manual searching
• Reduce time spent summarising meetings and written content
• Automate routine tasks triggered by AI outputs
• Support compliance with data residency and sovereignty requirements
• Enable AI adoption in high-risk or regulated environments
• Operate AI services within existing infrastructure and controls
• Maintain ownership of data, models, and operational decisions

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@officelabs.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

466398128875710

Contact

Graham Bidwell
01392 24 0 365
sales@officelabs.co.uk

About your service

• Service categories:

  Application Development and Deployment

  AI platforms

  • Search and knowledge discovery

  AI software services

  • Conversational AI Software Services
  • Generative AI Software Services
  • Document AI Software Services
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Klyra Sovereign operates as a standalone AI platform on customer-controlled infrastructure. It can optionally integrate with existing systems (such as document repositories or collaboration platforms) to extend functionality, but it does not depend on other software services to operate.
• Cloud deployment model: Private cloud
• Service constraints: Klyra Sovereign is deployed to customer-controlled infrastructure and requires suitable hardware or a private cloud environment that meets minimum specification requirements. Customers are responsible for providing, securing, and maintaining the underlying infrastructure, including power, network connectivity, backups, and resilience. Planned maintenance and updates are coordinated with customers and may require service restarts. Service availability and performance are partly dependent on the customer’s infrastructure design and capacity. GPU acceleration is optional but required for higher performance and larger model workloads. Air-gapped deployments require additional planning and are subject to separate agreement.
• System requirements:
  • Customer-provided physical server or private cloud virtual machine
  • Ubuntu 22.04 LTS operating system
  • Minimum eight CPU cores available
  • Minimum thirty-two gigabytes RAM
  • Solid-state storage with sufficient capacity for models and data
  • Optional NVIDIA GPU for accelerated inference workloads
  • Stable network connectivity for updates and administration
  • Administrator access for installation and configuration
  • Secure internal network environment with appropriate access controls

User support

• Email or online ticketing support: Yes
• Support response times: Support requests submitted via email or the online ticketing system are monitored during UK business hours, Monday to Friday, excluding public holidays. Initial responses are typically provided within one business day. Requests received outside business hours are reviewed on the next working day. Response times may vary depending on the nature and priority of the request.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Support is provided as a standard service level included with the software subscription. This includes access to email and online ticketing support during UK business hours, Monday to Friday, excluding public holidays. Support covers incident logging, fault investigation, and resolution of software-related issues.; ; Enhanced support services, including extended support hours, prioritised response, onsite assistance, and advisory support, are available at additional cost and are procured separately under appropriate Cloud Support listings.; ; OfficeLabs does not provide a dedicated technical account manager or cloud support engineer as part of the standard software subscription. Where required, customers may procure named technical resources, implementation support, or ongoing service management through separate Cloud Support services.; ; All support requests are managed through a structured ticketing process, with issues prioritised based on impact and urgency.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Klyra Sovereign is introduced through a structured onboarding process to ensure secure and effective adoption. Getting started begins with an initial discovery session to confirm requirements, intended use cases, deployment approach, and infrastructure readiness. This helps ensure the customer’s environment meets the necessary technical specifications before installation.; ; The service is installed and configured on customer-controlled infrastructure, either remotely or onsite where required. Installation includes core platform setup, initial configuration, and validation that the service is operating correctly within the customer environment. OfficeLabs coordinates onboarding activities and supports customers throughout this process.; ; Administrators are provided with guidance on user management, document ingestion, configuration options, and operational use of the platform. User documentation is supplied in digital format and covers both administrative and end-user functionality. End users access the service through a web-based interface and typically require minimal training to begin using AI chat and knowledge search features.; ; Optional remote or onsite training sessions can be provided to support administrators and users, covering best practices, workflows, and governance considerations. Additional advisory support, integration assistance, and tailored onboarding services are available at extra cost through separate Cloud Support services.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: At the end of the contract, administrators can export all available service data from the administrative dashboard. This includes AI usage records, audit logs, and compliance reporting data, which can be extracted in standard formats such as CSV.; ; Following contract termination, access to the service is withdrawn and browser extensions are uninstalled using standard browser management controls. Any remaining service metadata held by the supplier is securely deleted in line with documented retention periods. Users retain ownership of their exported data at all times.
• End-of-contract process: At the end of the contract, the Klyra Sovereign software licence expires and access to ongoing updates and support is withdrawn in line with the agreed notice period. As the service is deployed on customer-controlled infrastructure, all customer data, documents, and AI outputs remain within the customer’s environment at all times.; ; The standard contract price includes the right to use the software for the contracted term, routine software updates during the term, and standard support services. No data extraction or migration is required, as data does not reside on supplier-managed infrastructure.; ; Following contract termination, customers may continue to retain their data on their own systems. Assistance with data export, platform decommissioning, or transition planning is not included as standard and may be provided at additional cost if requested. Any extended support, bespoke exit assistance, or post-termination advisory services must be agreed separately under appropriate Cloud Support arrangements.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Onboarding and offboarding documentation is provided in digital formats that can be accessed through standard web browsers. Documentation is made available online and in downloadable formats, enabling users to apply browser-based accessibility features such as screen magnification, zoom, text resizing, and keyboard navigation. Content is structured to support clear navigation and readability.; ; Accessibility of the documentation depends on the capabilities of the underlying documentation platform and the user’s chosen assistive technologies. No bespoke accessibility adaptations are required to access the documentation, and users can request alternative formats or additional support where reasonable adjustments are needed.; ; Where documentation is provided by third-party platforms, accessibility aligns with the features supported by those platforms and standard browser technologies.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Klyra Sovereign provides a secure, web-based user interface hosted within the customer’s environment. Users access the service through a browser to interact with AI chat, search organisational knowledge, and review outputs. Administrators use the interface to manage users, configure settings, monitor usage, and oversee document ingestion and workflows.
• Accessibility standards: None or don’t know
• Description of accessibility: Klyra Sovereign is accessed through a secure, web-based interface hosted within the customer’s environment and used via a standard web browser. Authorised users can interact with AI chat, search organisational knowledge, and view AI-generated outputs according to assigned permissions. Administrators can manage users, configure settings, control document ingestion, and review usage activity. Role-based access controls restrict functionality and data visibility. The service relies on accessibility features provided by modern browsers and operating systems, including keyboard navigation, screen readers, and display scaling. Users cannot access system configuration or infrastructure unless granted administrative permissions.
• Accessibility testing: No formal user testing has been conducted specifically with users of assistive technologies. Accessibility is supported through the underlying software platform and standard browser accessibility features. Where accessibility issues are identified, these can be raised through the support process and are reviewed to determine whether reasonable adjustments can be made.
• API: Yes
• What users can and can't do using the API: Klyra Sovereign provides APIs to support integration with existing systems and workflows, including document repositories and business applications. API access is available to authorised administrators and is documented for secure use within customer-controlled environments.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Klyra Sovereign can be customised through configuration within the customer’s deployed environment. Authorised administrators can customise AI behaviour by managing the documents and data sources used to build the organisational knowledge base, defining ingestion rules, and controlling how information is indexed and queried. Administrators can configure user roles and access permissions to ensure users only interact with approved content and functionality.; ; The service supports customisation of workflows triggered by AI outputs, allowing organisations to automate routine tasks or integrate AI results into existing processes. Configuration settings can be adjusted through the administrative interface or documented APIs, without requiring changes to the underlying platform code.; ; Language, terminology, and prompts can be tailored to align with organisational context and working practices. Model selection and performance settings can be adjusted where supported by the customer’s infrastructure, including optional GPU acceleration.; ; Customisation is performed by authorised administrative users only. End users cannot alter system configuration or platform behaviour. Bespoke development, custom model training, or changes to core platform functionality are not included as standard and may be delivered separately under additional Cloud Support services.

Scaling

• Independence of resources: Klyra Sovereign is deployed to customer-controlled infrastructure, with each customer operating an isolated instance of the service. Resources such as compute, storage, and networking are dedicated to the individual customer environment and are not shared with other organisations. This deployment model ensures that demand or usage from one customer cannot affect the performance, availability, or capacity of another customer’s service. Resource allocation, scaling, and performance are determined solely by the customer’s infrastructure configuration and usage patterns.

Analytics

• Service usage metrics: Yes
• Metrics types: Klyra Sovereign provides usage metrics through the administrative interface. Metrics include user activity, AI interactions, query volumes, document usage, workflow execution activity, and overall platform usage trends. Metrics support operational oversight, capacity planning, and governance reporting within customer-controlled environments.
• Reporting types:
  • Real-time dashboards
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Klyra Labs

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure

Data importing and exporting

• Data export approach: All data processed by Klyra Sovereign is stored on customer-controlled infrastructure. Users export data directly from their own systems using standard tools and processes appropriate to their environment. Documents, AI outputs, transcripts, and configuration data can be exported in commonly used formats such as JSON, CSV, PDF, or original source formats, depending on the data type. No supplier-managed export process is required, as data does not reside on external platforms. Customers remain fully responsible for managing, securing, and retaining exported data in line with their organisational policies.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Klyra Sovereign does not include a guaranteed service availability percentage or formal uptime SLA as part of the standard contract. The service is deployed on customer-controlled infrastructure, and availability is therefore dependent on the customer’s hardware, network configuration, and resilience arrangements.; ; The software is designed to operate reliably within supported environments and is provided with ongoing updates and standard support during the contract term. In the event of a service issue related to the software, OfficeLabs and the software supplier will investigate and provide reasonable assistance to restore normal operation.; ; As no availability SLA is provided, there are no service credits, refunds, or financial compensation linked to service availability under the standard contract. Customers requiring guaranteed availability, enhanced resilience, or service credits should implement appropriate infrastructure-level controls or procure additional managed services separately.
• Approach to resilience: Klyra Sovereign is designed to be resilient through deployment on customer-controlled infrastructure, allowing organisations to apply their own resilience, availability, and disaster recovery strategies in line with internal requirements. The service operates within supported operating environments and is engineered to recover cleanly following restarts, updates, or infrastructure events.; ; Where deployed in customer private cloud or datacentre environments, resilience is achieved through the customer’s infrastructure design, including redundant compute, storage, networking, power, and backup arrangements. The software supports standard backup and restore processes, enabling recovery of configuration and data using customer-managed tools.; ; Updates and maintenance activities are coordinated to minimise disruption and are designed to avoid data loss. Logical separation of service components reduces the impact of localised failures within the deployed environment.; ; Details of recommended resilience patterns, infrastructure configurations, and recovery approaches are provided during onboarding. Information relating to underlying datacentre resilience and hosting certifications is managed by the customer’s infrastructure provider and is available on request where required for assurance purposes.
• Outage reporting: Service availability issues are communicated through the support process and relevant service communications. Where an outage is identified, users can raise incidents through email or the online ticketing system and receive updates on status and resolution progress.; ; The service does not provide a dedicated public status dashboard or customer-accessible outage reporting API. Where outages relate to the underlying cloud hosting platform, information may also be made available through the hosting provider’s published service health communications. Users may receive email notifications for significant service incidents where appropriate.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is restricted through authenticated user accounts and role-based access controls. Administrative privileges are limited to authorised personnel with defined responsibilities. Support channels are accessible only to verified customer contacts and OfficeLabs support staff. Access rights are reviewed periodically to ensure they remain appropriate. Where third-party platforms are used to deliver management or support functions, their native access control mechanisms are applied in line with organisational security policies.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: OfficeLabs operates a formal information security management framework aligned with ISO/IEC 27001. Documented policies and procedures cover areas including access control, data protection, incident management, risk assessment, supplier management, and business continuity. Policies are reviewed regularly to ensure continued relevance and effectiveness.; ; Overall responsibility for information security sits with a named board-level role, supported by operational security leads who oversee day-to-day implementation. Security risks are identified, assessed, and managed through a structured risk management process, with findings escalated where required.; ; Compliance with security policies is supported through defined processes, role-based responsibilities, staff awareness activities, and internal review mechanisms. Security incidents and weaknesses are reported through established channels and managed in line with documented incident response procedures.; ; Third-party services used in the delivery of the service are assessed as part of supplier and risk management processes to ensure appropriate security controls are in place. The effectiveness of information security controls is monitored and reviewed as part of ongoing governance activities.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Configuration items relating to the service are identified and managed through documented configuration and change management processes. Changes are requested, assessed, approved, and implemented in a controlled manner, with records maintained to track components throughout their lifecycle. Proposed changes are reviewed for potential security, availability, and operational impact before implementation. Where changes may affect security controls, additional risk assessment and mitigation steps are applied. Changes are tested where appropriate and implemented in line with defined procedures to reduce the risk of unintended impact.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Potential threats are identified through a combination of vendor security advisories, cloud provider notifications, vulnerability disclosures, and internal review. Reported vulnerabilities are assessed based on risk, impact, and exploitability. Remediation actions are prioritised accordingly. Security patches and updates are applied in a controlled manner and within reasonable timescales based on severity and operational impact. Where vulnerabilities relate to third-party components or hosting platforms, remediation is coordinated with the relevant suppliers. Vulnerability status and remediation actions are tracked through established operational security processes.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Protective monitoring activities are used to identify potential security events and compromises through review of service logs, alerts, and notifications from underlying platforms and suppliers. Potential incidents are assessed to determine impact and severity. Where a compromise is suspected, predefined incident response procedures are followed to contain, investigate, and remediate the issue. Incidents are responded to promptly and prioritised based on risk and potential impact, with escalation applied where necessary in line with documented security and incident management processes.
• Incident management type: Supplier-defined controls
• Incident management approach: The organisation operates documented incident management processes covering identification, assessment, response, and resolution of security and service incidents. Pre-defined procedures are in place for common incident types to support consistent handling and escalation. Users can report incidents through email or the online ticketing system. Incidents are logged, prioritised based on impact and urgency, and managed through to resolution. Where appropriate, users are provided with updates and post-incident information outlining the nature of the incident, actions taken, and any relevant follow-up.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: A time-limited trial is available for evaluation purposes. The trial includes access to core prompt scanning, blocking, and basic usage reporting for a limited number of users. Custom policy configuration, advanced reporting, advisory support, and ongoing use beyond the trial period are not included. Trial duration is agreed in advance.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 3%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 7%
• Between £2,500,001 and £5,000,000: 10%
• Over £5,000,001: 12%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Alcumus ISOQAR
• ISO/IEC 27001 accreditation date: Tuesday 7 October 2025
• What the ISO/IEC 27001 doesn’t cover: The ISO/IEC 27001:2022 certification applies to the OfficeLabs Information Security Management System (ISMS) as defined in the documented scope and Statement of Applicability.; ; The certification does not cover customer-owned systems, infrastructure, networks, or devices that are not operated or managed by OfficeLabs, including client environments accessed for consultancy or delivery purposes. It also does not extend to third-party platforms or services used by OfficeLabs, except where these are governed through supplier due diligence, contractual controls, and ongoing risk management within the ISMS.; ; End-user locations, home networks, and personal equipment are not directly certified, beyond the organisational policies and controls applied to remote working. Activities, information assets, or processing operations that fall outside the formally defined ISMS scope are also excluded.; ; As with all management system certifications, the ISO/IEC 27001 certification is based on limited audit sampling and does not guarantee the absence of all non-conformances.; ; All information assets, systems, and services within the defined scope are managed in accordance with ISO/IEC 27001:2022, with risks outside the scope addressed through governance, supplier management, contractual obligations, and risk assessment processes.
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 89b8902b-27bd-4ea6-a83b-54fad105966b
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 8c841283-44fe-4dc5-85ee-6208d10fd4a5
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@officelabs.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.