BRAMBLE HUB LIMITED

Bramble Hub - Agentic AI & Multi-Agent Systems Platform

AI development with zero upfront cost, zero development risk and predictable monthly costs. Agentic AI and multi-agent automation platform delivered by subscription, including a dedicated delivery team with no consultancy day rates. Provides orchestration, governed workflows, human approval controls, audit trails, and API integration with existing systems and data sources.

Features

• Platform subscription includes dedicated delivery team, no consultancy fees
• Michie.AI hub for AI-powered business requirements, solution design
• Yochi module for predictive intelligence, location forecasting, behaviour analysis
• Document Intelligence for SharePoint content auditing, PII detection, compliance
• Multi-agent orchestration engine for complex parallel workflow automation
• Natural language interfaces enabling nontechnical users to work with agents
• Human-in-the-loop controls for governance and decision oversight
• Full API access for integration with enterprise systems and databases
• Explainable AI with complete audit trails for compliance requirements
• Built on LangGraph and LangChain; meets UK government standards

Benefits

• Zero upfront costs, zero risk, predictable monthly subscription pricing
• One subscription covers platform, delivery team, and support
• Dedicated security-cleared personnel included at higher subscription tiers
• Predictable budgeting, no day rate surprises or scope creep
• Faster time-to-value with team already familiar with platform
• In-house AI capability without expensive external consultants
• Proactive operational intelligence through Yochi predictive analytics
• Compliance risk reduction through Document Intelligence automated scanning
• Pilot costs credited against subscription if converted within six months
• Volume discounts up to 15% automatically applied on larger commitments

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at contact@bramblehub.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

928715384969543

Contact

Geoff Couling
+44 (0) 2077350030
contact@bramblehub.co.uk

About your service

• Service categories:

  Application Development and Deployment

  AI platforms

  • Search and knowledge discovery

  AI life cycle

  • AI Build Software

  AI software services

  • Generative AI Software Services
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: Planned maintenance windows are scheduled for Sundays 02:00-06:00 UK time, with a minimum of 5 business days' notice. Emergency maintenance may occur outside these windows with best-efforts notification. Service operation requires stable network connectivity from customer premises, appropriate API access to integrated systems, and timely provision of credentials and access rights during onboarding. The customer is responsible for the accuracy and quality of input data.
• System requirements:
  • Stable network connectivity from customer premises to platform endpoints
  • API access credentials for integrated systems provided during onboarding
  • Modern web browser (Chrome, Edge, Firefox, Safari) for platform access
  • Customer responsible for accuracy and quality of input data
  • Customer responsible for accuracy and quality of input data

User support

• Email or online ticketing support: Yes
• Support response times: P1 Critical (service unavailable): 4 hours (Standard), 2 hours (Professional), 1 hour (Enterprise). P2 Major feature degradation: 8 hours (Standard), 4 hours (Professional), 2 hours (Enterprise). P3 Minor issues/queries: 48 hours (Standard), 24 hours (Professional), 8 hours (Enterprise). Standard support Monday-Friday 09:00-17:00. Professional 08:00-20:00. Enterprise 24/7/365.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: X
• Onsite support: Yes, at extra cost
• Support levels: "All support is included in your subscription - no additional support contracts required.; ; Pilot and Starter tiers (£1,500-£3,500/month): Platform access with standard support Monday-Friday 09:00-17:00, 4-hour P1 response. Ideal for proof-of-concept and initial deployments.; ; Professional tier (£8,500/month): Everything above plus a dedicated Cloud Support Engineer (SC clearable) assigned to your account, extended 08:00-20:00 support hours, 2-hour P1 response, and monthly service reviews. Your engineer knows your setup and priorities.; ; Enterprise tier (£18,000/month): Everything above plus a named Technical Account Manager (DV cleared available), 24/7/365 support coverage, 1-hour P1 response, quarterly strategic roadmap sessions, and priority access to new platform features. White-glove service with senior personnel dedicated to your success."
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: "Onboarding and implementation support is included with your subscription tier. Our team handles environment setup, configuration, integration, and training as part of getting you live - not as billable extras.; ; Pilot tier includes streamlined onboarding to get you operational quickly. Starter and above include discovery workshops, full environment provisioning, data integration, user acceptance testing, training, and a hypercare period post go-live.; ; For complex requirements, optional implementation packages (£5,000-£55,000) provide additional dedicated resource for extensive customisation, multiple integrations, or accelerated timelines. These are credited against your ongoing subscription if you proceed to full deployment within six months."
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Full data export in standard formats (JSON, CSV, or as agreed). Configuration and workflow documentation export. Secure deletion of all customer data with certification provided.
• End-of-contract process: Clean and compliant exit process including: Full data export in standard formats (JSON, CSV, or as agreed). Configuration and workflow documentation export. Secure deletion of all customer data with certification. Transition support to successor supplier (up to 30 days). Decommissioning confirmation and audit trail. Pilot implementation costs credited against full deployment if converted within 6 months.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The platform is fully responsive and accessible on mobile devices. Core features including monitoring agent workflows, reviewing outputs, and approving decisions work on mobile. Complex configuration and development workflows are optimised for desktop screens.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: The platform provides a web-based interface for configuring and monitoring AI agents, managing workflows, and reviewing outputs. Users can access Michie.AI hubs for business transformation (Think, Build, Automate, Train), Yochi dashboards for predictive intelligence, and Document Intelligence for SharePoint compliance scanning. Natural language interfaces enable non-technical stakeholders to interact with agents directly.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: Regular accessibility testing using automated tools (Axe, Lighthouse) and manual testing with screen readers (NVDA, JAWS, VoiceOver). Feedback incorporated from users of assistive technology during development.
• API: Yes
• What users can and can't do using the API: Users can programmatically trigger agent workflows, retrieve outputs and status, integrate with external systems, configure automations, and export data. The API enables integration with existing enterprise systems including databases and cloud services. Custom API integrations available at £8,000 per integration. Users cannot modify core platform security controls via the API.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: "The platform is highly configurable through the web interface - your team or ours can tailor workflows, agent behaviours, and integrations to your requirements.; ; Standard customisation is included in your subscription: workflow configuration, user permissions, reporting dashboards, and integration setup with common enterprise systems.; ; For bespoke requirements, optional development services are available: custom agent development (£12,000 per agent) and specialist API integrations (£8,000 per integration). Your dedicated engineer at Professional tier and above handles most customisation needs as part of the subscription."

Scaling

• Independence of resources: Multi-tenant architecture with dedicated compute resources per customer. Dedicated Environment (isolated tenant) available as add-on at £3,500/month for complete isolation. Auto-scaling ensures consistent performance during demand spikes. UK-hosted infrastructure with geo-redundancy included in all tiers.

Analytics

• Service usage metrics: Yes
• Metrics types: Agent execution metrics, workflow completion rates, processing volumes, API usage, user activity, and performance dashboards. Advanced Analytics & Reporting Module available as add-on at £950/month.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Data Erasure

Data importing and exporting

• Data export approach: Via the platform interface or API. Full data export in standard formats (JSON, CSV, or as agreed). Configuration and workflow documentation export available.
• Data export formats: CSV
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • JSON
  • XML

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Target service availability is 99.5% (Standard) to 99.9% (Enterprise), excluding planned maintenance. Planned maintenance windows scheduled for Sundays 02:00-06:00 UK time with minimum 5 business days' notice. Service credits provided for availability below SLA: 10% below threshold, 25% below 99%, 50% below 95% in any calendar month.
• Approach to resilience: Recovery Point Objective (RPO): 4 hours. Recovery Time Objective (RTO): 8 hours (Standard), 4 hours (Enterprise). Active-passive failover across geographically separated UK data centres. Automated daily backups with 30-day retention. Point-in-time recovery capability up to 7 days. Documented DR plan with annual testing and reporting. Incident management procedures aligned with ITIL best practice.
• Outage reporting: Communication protocols for major incident notification. Email alerts to registered administrators. Status updates via support channels. Incident management procedures aligned with ITIL best practice.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
• Access restrictions in management interfaces and support channels: Role-based access control with least privilege. Admin access requires MFA and is logged. Support staff verify identity before account discussions. Comprehensive audit logging for all access.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users receive audit information on a regular basis
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Cyber Essentials, NCSC Cloud Security Principles, UK OFFICIAL classification supported
• Information security policies and processes: Cyber Essentials framework, NCSC Cloud Security Principles, GDPR compliance, role-based access control with MFA enforcement, comprehensive audit logging, SIEM integration, regular security awareness training.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: All infrastructure changes managed through version control. Changes require peer review and testing before deployment. Configuration documented and maintained as part of service. Complete audit trail maintained for all changes.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Continuous vulnerability scanning. Critical patches deployed promptly. Regular penetration testing validates controls. Subscription to security advisories and threat intelligence feeds.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Comprehensive audit logging and SIEM integration. Real-time alerting for security events. Incident escalation procedures with defined response times. Regular backup integrity testing.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: X
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Pilot from £1,500/month (3-month minimum, 10% discount for 12 month commitment) lets you prove value before committing to larger deployment. Includes platform access for max 5 users and 3 AI agents with standard support.; Zero upfront implementation costs. ; Pilot implementation credited if conversion to Starter or above within 6 months.
• Link to free trial: https://stealthlabs.uk

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: UKAS
• ISO/IEC 27001 accreditation date: Tuesday 31 December 2024
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: UKAS
• ISO 9001 accreditation date: Tuesday 31 December 2024
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 94c671e6-823b-4c1b-9e66-be61b04e765c
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 3b271556-6f71-40cd-bd60-169f03c35f6e
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at contact@bramblehub.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.