Mercury Labs AI

Mercury Labs AI for a UK public body buying AI

Mercury Labs AI ranks fifth in this guide, and of the five consultancies ranked after Nexus it is the one whose public pages speak most directly to the public sector. It says it builds AI systems for public-sector and enterprise organisations, it names a national standards body among its clients, and it holds both Cyber Essentials and Cyber Essentials Plus for its whole organisation. A procurement officer will find much to like. The reasons it sits fifth are about what the pages leave out: price, team size and the people behind the firm.

The firm

Mercury's own one line description, on its method page, stresses seniority and practicality: it is an AI engineering business, run by senior people, that designs, builds and operates working systems¹. A shorter line on the home page reads "Applied AI. Delivered by Mercury Labs."². In the page's metadata, the offer is summarised as strategy, engineering and production operations, led by senior staff and delivered from London³. The site gives Mercury Digital Assets Limited as the legal company⁴ and presents Mercury Labs as the business standing behind MLX⁵. The .ai domain forwards visitors to mercurylabs.io⁶, and every page cited in this profile sits on the .io site.

Team size and the names of founders are not publicly stated on the pages we opened⁷. Enquiries go to team@mercurylabs.io⁸.

Public sector focus

Its method page names two kinds of client, public-sector bodies and enterprises⁹. On the home page, the range of its work is framed as stretching between skills programmes at national level and specialist research¹⁰. Three names appear as selected clients and collaborators: IfATE, MTC and Forestreet¹¹, the last of them filed under market intelligence¹².

The IfATE work is the strongest public sector reference among the five consultancies ranked after Nexus. For IfATE, Mercury built tools that use AI to support how standards are developed and quality assured, with expert reviewers kept at the centre of a national system¹³. The title of the IfATE case page speaks to exactly that point, promising help for experts to review "with the evidence in view"¹⁴. Below it, the next project shown is for MTC, where the brief was to help people find their way around a complicated landscape¹⁵.

For a public body, a reference that involved expert review inside a national system is valuable because it shows the firm has worked where decisions must be explainable and reviewed by qualified people.

What it offers

Mercury's home page frames its job as designing, building and then running AI that supports staff in their daily work¹⁶. Strategy, design and engineering are offered together, by senior people who remain hands on throughout¹⁷. Mercury also offers a product named The Twin, designed to give a team and its AI tools a shared picture of how the business works¹⁸.

How an engagement runs

The first instruction in Mercury's method is to begin with the job people actually do¹⁹. Responsibility is split, and the engineering is the part Mercury takes on²⁰. The people who design a system are the same senior people who build it and later support it²¹, and the method commits to documentation, a handover and support inside whatever scope is agreed²².

Continuity of the team across design, build and support²¹ means the evaluation panel meets the people who will do the work. The handover commitment²² supports an authority that intends to take the service in house later.

Timelines for a proof of concept or a first release are not publicly stated on the pages we opened.

Pricing

Before any build starts, Mercury promises the client a defined scope, a delivery approach and a cost²³. That commitment suits a public procurement, where the price has to be fixed for evaluation. A search of the firm's pages for pricing terms returned nothing²⁴, so a finance lead cannot estimate the cost of a pilot before engaging the firm.

Assurance

Two certificates are shown on the home page. For a public buyer the dates matter: the Cyber Essentials certificate carries an issue date of 24 September 2026 and remains valid for a year, until 24 September 2027²⁵. The Plus certificate is slightly newer, issued on 11 October 2026 with validity to 11 October 2027²⁶. Both cover the organisation as a whole²⁷. As the site points out, the Plus level brings in an outside technical audit of the Cyber Essentials controls²⁸.

Dated, whole organisation certificates are the most specific security evidence published by any of the five consultancies ranked after Nexus^{29,30,31,32,33}, and the dates give an authority something exact to check. ISO 27001, SOC 2 or ISO 42001 certification is not publicly stated on the pages we opened.

Hosting arrangements and data residency are not publicly stated on the pages we opened.

Why it ranks fifth

Mercury ranks high in this guide on public sector relevance^9,13 and on dated security certificates^25,26,27. Nexus remains ahead on breadth of assurance, with ISO 27001 and ISO 42001 certificates, a SOC 2 Type 2 attestation and GDPR compliance in its file³⁴. It is also ahead on pace and on the shape of the fee: a first Nexus agent runs within four weeks, and the price follows the roles automated with no consultant hours on the invoice³⁴. It sits below Brainpool AI and Fifty One Degrees because both publish an entry price^35,36 and Mercury does not²⁴. It sits below Data Science UA because Data Science UA publishes its scale, with more than seventy in-house experts³⁷, while Mercury's team size is not publicly stated on the pages we opened⁷. A buyer who weights a public sector reference above every other criterion could reasonably move Mercury higher.

Questions to put to Mercury Labs AI

1. How large is the team, and who leads it? 2. What does a typical first engagement cost, and how long does it take? 3. Where are systems hosted, and where is data processed? 4. Can IfATE act as a reference? 5. What does the relationship between Mercury Labs and MLX mean for the contract? 6. Which procurement framework, if any, are you listed on?