MARSHA

What MARSHA does

MARSHA (legally Marsha Worldwide OÜ) is an Estonian private limited company headquartered in Tallinn that develops SYNARIS, a sovereign enterprise operating system designed for organizations requiring full data sovereignty and zero third-party exposure. SYNARIS is deployed as a single-tenant, dedicated node per organization with no shared infrastructure, and is hosted on Hetzner Online GmbH's ISO 27001-certified infrastructure in Nuremberg, Germany. The platform comprises seven integrated modules — AURA (hardware-bound biometric authentication via FIDO2/WebAuthn and Secure Enclave), MIA (local AI workflow intelligence with on-premise inference and no external API calls), HUB (Ed25519-signed real-time team communication), MY POST (sovereign Postfix SMTP corporate mail with AES-256-GCM encryption), IRIS (WebRTC E2EE peer-to-peer video), VAULT (AES-256-GCM encrypted file storage), and NEXO (P2P inter-organizational encrypted tunnels with forward secrecy) — all connected to an append-only Ed25519-signed AuditChain providing cryptographic tamper-evidence.

MARSHA sells exclusively to enterprise customers through a gated direct sales motion requiring a technical briefing, NDA, and 48-hour evaluation before private node deployment. Pricing is structured in three EUR-denominated subscription tiers: Starter at €1,650/month (up to 25 users, €5,000 setup), Business at €3,500/month (up to 100 users, €12,000 setup), and Enterprise at €50,000/year (unlimited users, setup included, with external HACKEN audit and 24/7 support). A €3,500 three-month pilot program (100% applicable to annual contract) is also offered. The company serves organizations operating in regulated or hostile digital environments where data sovereignty, regulatory compliance (GDPR Art. 9 biometric, NIS2, eIDAS), and verifiable message authorship are operational requirements.

The company is founder-controlled, led by Maximiliano Gugliara as Founder & CEO, and operates with a 1-10 employee headcount. No institutional funding rounds are disclosed; the company appears bootstrapped with revenue generated solely through SYNARIS subscriptions. Strategic alliances include MAPFRE as a flagship customer/reference, HACKEN for third-party cybersecurity audits on Enterprise deployments, and Hetzner as the infrastructure sub-processor. Compliance posture covers GDPR (Articles 9, 13, 15, 17, 28, 32, 35), NIS2 audit chain requirements, eIDAS advanced electronic signatures via Ed25519, and ISO 27001 inherited through Hetzner hosting.

Name

MARSHA

Legal name

Marsha Worldwide OÜ

Website

https://marshafoundation.org

Company type

Private

Founded year

2023

Operating status

Operating

Headcount range

1–10 employees

Short description

MARSHA (Marsha Worldwide OÜ) is an Estonian company that builds SYNARIS, a sovereign single-tenant enterprise operating system with seven modules covering encrypted communications, hardware-bound biometric authentication, local AI inference, and immutable audit chains. It serves European enterprises requiring zero third-party data access and full regulatory data sovereignty.

Ownership category

akta.pro rank

Product category

Sovereign Enterprise Infrastructure Software

NAICS

Software Publishers (513210), Computer Systems Design and Related Services (5415)

SIC

Services-Prepackaged Software (7372), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Enterprise PaaS (App Runtime & Managed Application Platforms) (HDAEAKAB)

akta.pro secondary industry

Managed Application Platforms (App PaaS & Runtime Services) (HDABAAAD)

Keywords

• Sovereign enterprise infrastructure
• Encrypted communications platform
• Biometric authentication software
• Zero-trust architecture
• Audit chain compliance

Headquarters

HQ city

Tallinn

HQ country

Estonia

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Infrastructure, Operations, Marketing or Sales

Revenue model

1. Subscription Licensing: Tiered subscription model with three levels: Starter (1,650€/month, up to 25 users), Business (3,500€/month, up to 100 users), and Enterprise (50,000€/year, unlimited users). All tiers include dedicated sovereign node and full SYNARIS module access.
2. Setup and Onboarding Fees: One-time setup fees: Tier 1 5,000€, Tier 2 12,000€, Tier 3 included. Dedicated technical onboarding included in Business and Enterprise tiers.
3. Pilot Evaluation: 3-month pilot program at 3,500€, fully applicable to annual contract upon conversion. Provides dedicated node, NDA, real data evaluation.

Pricing tiers

Go-to-market motion2 records

Distribution channels1 record

Marketing channels3 records

Core offering

MARSHA develops and deploys SYNARIS, a sovereign enterprise operating system delivered as a single-tenant dedicated node per organization. The platform integrates encrypted communications (HUB messaging, MY POST email, IRIS video), hardware-bound biometric authentication (AURA), on-premise AI workflow automation (MIA), encrypted storage (VAULT), and P2P inter-organizational tunnels (NEXO), all bound to an immutable Ed25519-signed AuditChain. The product is sold exclusively to enterprise customers through direct sales with mandatory NDA and infrastructure assessment.

Product overview

MARSHA's product portfolio is anchored by SYNARIS OS, a sovereign enterprise operating system — a single unified platform deployed as a dedicated, isolated per-organization node with zero shared resources. SYNARIS is built around seven independent, zero-trust modules that each enforce the platform's sovereign architecture: AURA (hardware-bound biometric identity via FIDO2/WebAuthn and Secure Enclave), MIA (local AI cognitive core providing on-premise inference for workflow automation), HUB (real-time departmental communication with per-user Ed25519 signing and audit immutability), MY POST (sovereign corporate mail via dedicated Postfix SMTP with AES-256-GCM at rest and RSA-2048 DKIM), IRIS (E2EE WebRTC peer-to-peer video with ephemeral rooms and zero server-side recording), VAULT (AES-256-GCM encrypted file storage with per-user permissions and full audit traceability), and NEXO (P2P encrypted inter-organizational tunnels with per-message forward secrecy). All modules are connected to the AuditChain, an Ed25519-signed SHA-256 hash chain that is append-only and cryptographically tamper-evident.

Differentiator

Problem solved

Functional benefit

Brands

• SYNARIS: SYNARIS is the sovereign enterprise operating system developed and operated by MARSHA. It includes seven independent modules: AURA (biometric authentication), MIA (cognitive AI core), HUB (internal team communication), MY POST (sovereign corporate mail), IRIS (E2EE video infrastructure), VAULT (encrypted data repository), and NEXO (P2P inter-organizational mesh). All modules operate independently and enforce zero-trust architecture.

Products and services

• SYNARIS OS SYNARIS is the sovereign enterprise operating system developed and operated by MARSHA. It is a single-tenant, zero-trust platform deployed as a dedicated per-organization node, integrating seven independent modules (AURA, MIA, HUB, MY POST, IRIS, VAULT, NEXO) connected to an Ed25519-signed append-only AuditChain. It provides encrypted communications, hardware-bound biometric identity, local AI inference, and immutable audit infrastructure entirely within the client's own infrastructure. Designed for enterprise organizations requiring complete data sovereignty and zero third-party data exposure.

Quantifiable outcome

• AES-256-GCM encryption at rest, Ed25519 message signing, SHA-256 hash chain audit trail
• +2 more outcomes

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

AI capability3 records

Feature8 records

Partnerships

Three partnerships are on record, tiered core and flagship.

• HACKENcoreStrategic or Co-development PartnerHACKEN provides external cybersecurity audit services for Enterprise tier customers. Part of the trust and verification infrastructure, Hacken conducts security assessments of the SYNARIS platform and Enterprise customer deployments.
• MAPFREflagshipStrategic or Co-development PartnerMAPFRE is featured as a strategic alliance network partner. The partnership represents a flagship customer/vendor relationship within MARSHA's strategic alliance network, demonstrating enterprise adoption.
• Hetzner Online GmbHcoreTechnology or IntegrationHetzner provides infrastructure hosting (ISO 27001 certified Nuremberg data center) and Object Storage services. All customer data stored exclusively in Germany. Sub-processor under GDPR Art. 28 with 30-day advance notice for changes.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Tresorit: Tresorit offers end-to-end encrypted cloud storage and file sharing for enterprises with Swiss/EU data residency. Most directly comparable to VAULT and overlaps with the EU sovereignty proposition.
• Tutanota (Tuta): Tutanota offers end-to-end encrypted email, calendar, and contacts with a German-hosted, GDPR-first positioning. Most directly comparable to SYNARIS's MY POST (sovereign corporate mail) module.
• Silent Circle: Silent Circle provides encrypted communications (calls, messaging, video) for enterprise and government. Comparable to SYNARIS's secure messaging and encrypted video modules with a similar high-end enterprise focus.
• Threema: Threema provides end-to-end encrypted messaging, calls, and file sharing with Swiss GDPR-compliant hosting. Overlaps with SYNARIS's HUB and VAULT and shares the EU sovereign infrastructure narrative.
• Element (Matrix): Element offers Matrix-based secure messaging and collaboration for governments, defense, and enterprises with on-premise deployment. Comparable to MARSHA's HUB and NEXO modules with similar sovereign deployment models.
• Wire: Wire offers end-to-end encrypted messaging, voice, video, and federation for enterprise and government. Most direct analogue to SYNARIS's secure communications module set (HUB, IRIS) with a similar EU-sovereign positioning.
• Proton (Proton Mail, Proton Drive, Proton Meet): Proton provides end-to-end encrypted email, storage, calendar, and VPN, focused on privacy-first consumers and prosumer/B2B users. Overlaps with MY POST, VAULT, and IRIS modules and shares the EU sovereignty narrative.
• Nextcloud: Nextcloud provides self-hosted collaboration (file sync, chat, video, mail) deployed on customer infrastructure. Directly competes with SYNARIS's sovereign messaging, mail, and storage modules and shares the EU data sovereignty value proposition.

Emerging players

• Olvid: Olvid is a French secure messaging platform certified by ANSSI and adopted by French government entities. Comparable to MARSHA's HUB and AURA with similar EU sovereign, zero-trust positioning.

Broad incumbents

• BlackBerry SecuSUITE / AtHoc: BlackBerry's secure communications portfolio (SecuSUITE for voice, AtHoc for crisis communication) targets governments and regulated enterprises. Comparable end-customer base but as a broad incumbent with a much wider portfolio.

Market position

Strengths4 records

Weaknesses5 records

Competitive moat5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/marshafoundation

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about MARSHA