MICKAI®SectorsRetail
Team
Sector · Retail with customer-data depth

Retail

The grocers, multi-site specialists, and loyalty operators that run one-to-one customer relationships at scale want the productivity of mainstream AI, and the law will not let them put loyalty profiles, purchase history, and regulated credit-broking decisions into a shared cloud. Mickai drops the retail department tools onto hardware the retailer owns, so the personalisation runs where the data already lives.

The problem and our solution
The buyer

The chief operating officer and chief customer officer of a grocer, multi-site specialist, or loyalty operator.

The problem

They want mainstream-AI personalisation across loyalty profiles, purchase history, and regulated credit decisions, and the law will not let that data sit in a shared, multi-tenant cloud.

Our sovereign solution

The retail department studios run on hardware the retailer owns, so personalisation, forecasting, and customer service run where the customer data already lives, and the regulated data never leaves the building.

The value

One-to-one personalisation at loyalty scale, with the PCI-DSS and UK GDPR exposure of a cloud route removed and the per-seat copilot bill converted to an asset the retailer owns.

The sovereign advantages

These architectural choices support control over the workflows in your deployment. Their benefits depend on configuration, integrations and operating practices. Review external connections, physical security, access and compliance responsibilities together.

Control the processing boundary

Scope inference, extraction, retrieval and storage on infrastructure you control. Document and test any external connector, support channel or transfer before describing a workflow as zero-egress.

Plan for disconnected work

Workflows with local models, data and supporting services can continue offline. Live external email, calendars and other services need an approved connection or controlled import, with clear unavailable and pending states.

Make data location inspectable

Map prompts, documents, indexes, logs and backups to their processing and storage locations. Local hosting supports control of location; access, retention and any transfers still need review.

Use approved company knowledge

Prepare and classify source records, preserve permissions and evaluate answers against the originals. Retrieval and model training are separate choices; agree data use and licences for each.

Budget for the whole service

Compare hardware and licences alongside integration, power, administration, support, updates, evaluation and recovery. Measure cost at the required workload and quality before claiming savings.

Verify access and authority

Define who holds keys, who can administer the system and which actions need approval. Test denied requests, revoked access and audit records. Physical security, insider risk and incident response remain operational responsibilities.

Control change and exit

Agree version selection, signed update procedures, rollback, data export and licence rights. Reassess requirements as software and obligations change; owning hardware does not remove maintenance or compliance work.

Requirements to assess

Review the requirements relevant to your organisation, jurisdiction and intended use with your responsible teams. Cloud services can be appropriate subject to applicable safeguards; on-premise deployment alone does not establish compliance or remove supplier responsibilities.

UK GDPR Article 5(1)(f) and Article 32, the security and integrity duties over customer data
PCI-DSS, the payment-card data security standard
FCA SYSC, for retailers that operate regulated credit broking and flexpay
US CCPA and CPRA, plus the wider state-privacy patchwork
Organisations of this profile

The kind of organisation this serves, named illustratively from public information to characterise the market. These are target profiles, not customers: Mickai has no relationship, engagement, trial, or endorsement with any of them.

Marks & SpencerNextJohn Lewis
The lead studios

The enterprise studios that lead in this sector, drawn from the eighteen that sit on the one sovereign substrate. Scope their local processing, operator-held keys and Open Audit Record coverage for the proposed deployment. Confirm availability and any external integrations before relying on a workflow.

Department studio

Demand Forecasting

Per-SKU, per-store forecasting on the retailer's own sales history, the Walmart Sparky margin class.

Department studio

CRM

Owned-data personalisation across the customer lifecycle, no record sent to a third party.

Department studio

Customer Service

Multilingual support and deflection where the customer PII never leaves the building.

Department studio

Compliance and Regulator Mode

The door-opener: DPIA and sealed audit across UK GDPR and PCI-DSS, with flexpay credit decisions sealed for FCA Consumer Duty.

Department studio

After-Sales and Field Service

Device-content processing kept on-prem at the repair operation, so customer device contents never leave.

See all eighteen on the sovereign services catalogue.

The opportunity

Pricing the serviceable upper tier of UK retail at the Department to Enterprise blend gives a band of roughly 0.2 to 0.8 billion pounds of capital opportunity, before recurring support and studio expansion. Tesco Clubcard alone runs approximately 7 million one-to-one customer relationships, the personalisation scale these buyers want but cannot lawfully obtain in the cloud for regulated data.

The outcome

Measure value, cost and risk on hardware you control.

Money won in forecasting and CRM through owned-data personalisation. Time saved across service and merchandising. Risk removed on flexpay credit decisions and at the repair bench. Cloud cost displaced as the per-seat copilot bill becomes a capex asset the retailer owns and depreciates.

Lawful B2B engagement

Map the sovereign stack to your retail estate.

Briefings are for organisations weighing a sovereign, on-premises deployment. Tell us about your estate and we will walk the pack, the regulatory crosswalk, and the deployment that fits your estate.

Other sectors
Law firms and legal-ops
Legal
Banking, insurance, and financial services
Finance
NHS Trusts and private healthcare
Healthcare
Defence and government
Public Sector
Generational discretion and an uncompromised deal edge, on hardware you own.
VCs and Family Offices
Multi-generational wealth, processed entirely inside your own walls.
Private Banking and Wealth
The ledger never leaves the firm.
Accounting, Tax and Audit
Price the risk without surrendering the risk profile.
Insurance and Actuarial
Sovereign discovery infrastructure for assets too valuable to leave the building.
Pharma, Biotech and Pre-patent IP
Quality auditing of device and calibration data that never leaves the building.
Medical Devices
Bunker-grade AI for work that can never touch the public cloud.
Defence, Aerospace and Dual-Use
Off-grid intelligence for the systems a nation cannot afford to lose.
Critical Infrastructure, Maritime and Energy
Your process is your moat. Keep it inside the factory walls.
Heavy Industry, Manufacturing and Semiconductors
Network intelligence that never leaves the core
Telecommunications
Sovereign research intelligence that keeps the IP, and the dual-use risk, on campus.
Academic and University Research
Sift the whole talent pool without the raw records ever leaving your building.
Executive Search and HR
Athlete telemetry and tactics that never leave the training ground.
Elite Sport and Performance
The client black book that never leaves the room.
Luxury, Private Aviation and VIP Concierge
Clienteling and collections held in the house, not the cloud.
Luxury Fashion
Tag every frame on premises, so no pixel ever leaves the studio.
Commercial Photography and Media Houses
Sovereign deal intelligence for the agencies that hold the industry's secrets.
Talent and Literary Agencies
Your catalogue, indexed and searchable, with no master ever leaving the building.
Music Studios and Labels
Source protection that never leaves the newsroom.
Press and Investigative Journalism
The IP lifecycle stays under lock and key, from script to final pixel.
Film, TV and VFX
Safeguarding intelligence that never leaves the trust.
Multi-Academy Trusts (Primary and Secondary)
Where the question paper never leaves the vault until test day.
Examination and Testing Boards
Special-needs records that never leave the setting
SEN and Alternative Provision
Ship native AI for schools without inheriting the data-processing-agreement fight.
EdTech and LMS Vendors