Secure documents.
Serious about compliance.
Merlon is the B2B platform for digital documents and on-demand secure cloud vaults — built so small and mid-sized businesses can run legally binding processes without compromising on data protection.
Compliance workspace
Overview
- 2m
- 14m
- 1h
Built for businesses in regulated industries — across the US and Switzerland
Built for every team that owns sensitive documents
One security foundation, shaped around the documents and approvals each function actually owns — across regulated industries on both sides of the Atlantic.
Legal & Compliance
Contract lifecycle, legal hold, and tamper-evident audit trails that hold up to scrutiny.
Explore LegalFinance
Conditional approvals, segregation of duties, and ERP sync for every authorization.
Explore FinanceHR & People
Isolated personnel vaults, fast onboarding signatures, and clean access revocation on exit.
Explore HROperations
Reusable workflows for onboarding, NDAs, and policy sign-offs with escalations.
Explore OperationsHealthcare
HIPAA-ready controls, BAAs, and access logging on every PHI record.
Explore HealthcareFinancial Services
SOC 2-aligned controls, dual control, and KYC document management.
Explore FinServEnterprise-grade protection, without the enterprise overhead
You handle documents every bit as sensitive as a large enterprise — Merlon gives you the security and compliance to match.
Secure by design
Encryption at rest and in transit, granular access control, and round-the-clock monitoring from our in-house security teams.
Legally binding
Compliant e-signatures and immutable audit trails that hold up to legal and regulatory scrutiny on both sides of the Atlantic.
Built for SMB
Enterprise-grade protection without enterprise complexity — deployed on demand, priced to scale with your business.
One platform, four building blocks
Documents, vaults, workflows, and audit — connected by design. Select a module to see how it works.
- 2m
- 14m
- 1h
Live in weeks, not quarters
Merlon is deployed on demand — no lengthy rollout, no dedicated infrastructure team required.
Bring your documents in
Import existing files or start fresh, into isolated vaults with the residency you choose — US or Switzerland.
Set access & workflows
Define least-privilege roles, wire up SSO, and turn on approval workflows that match how your teams operate.
Prove it, continuously
Every action lands in a tamper-evident audit trail — answering an auditor takes minutes, not days.
Two teams. Zero compromises.
We don't outsource trust. Our in-house Blue Team watches every endpoint, log, and packet in real time, while our Purple Team simulates attacks and validates every defensive control before it reaches production.
Blue Team · Detection & Telemetry
Continuous, systematic telemetry across endpoints, logs, and the network — turning raw signals into early, actionable detection.
Meet the Blue TeamPurple Team · Validation & Assurance
Controlled attack simulation and a hard release gate — protection is proven, not assumed, before any change ships to production.
Meet the Purple TeamConnect the tools you already use
Merlon plugs into your identity provider, storage, ERP, and collaboration tools — or build your own with the API.
Identity & SSO
Okta, Azure AD, and Google Workspace with SCIM provisioning.
Storage
SharePoint, Google Drive, and Dropbox for import and sync.
ERP & Finance
SAP, Abacus, and Bexio keep financial records in sync.
Collaboration
Slack and Teams notifications where your teams already work.
e-Signature
Built-in compliant e-signature with identity verification.
Automation & API
Zapier, Make, webhooks, and a REST API at api.merlon.ch/v1.
Simple, transparent pricing
Start with the essentials, add governance and identity as you grow, or go all-in with dedicated support and a DPA. Annual billing, no hidden add-ons, cancel at term.
billed annuallySave 20%
For small teams bringing their first sensitive document processes under control.
- Free features:
- Documents, versioning & e-signature
- Up to 5 secure vaults
- Immutable audit trail
- Role-based access (RBAC)
- US or Swiss residency
billed annuallySave 20%
For growing organizations that need identity federation and enforced workflows.
- Team features, plus:
- Unlimited secure vaults
- Approval workflows & SoD
- SSO & SCIM provisioning
- ERP & storage integrations
- Priority support & 99.9% SLA
volume-based · contact sales
For regulated buyers who need dedicated support, custom residency, and DPAs.
- Business features, plus:
- Dedicated Customer Success Manager
- Custom data residency region
- DPA, security review & questionnaires
- 24/7 enterprise support & SLA
Prices in USD for Americas customers. EU/EFTA and Swiss customers contract with Wahlen Software GmbH and are billed in CHF or EUR. See Pricing for details.
Standards we align our controls with
Merlon runs a single group security program with region-specific standards attached — your data stays in your region, with the compliance program to match.
United States
Switzerland & EU
Standards we align our controls with — not verified accreditations. See Compliance & Regions and the Trust Center.
Built for the people accountable for compliance
"We replaced three tools and a shared inbox with Merlon. For the first time our audit trail is something I'd actually put in front of a regulator."
"Data residency was a hard requirement for us. Merlon let us keep everything in Switzerland without slowing the business down."
"The security posture sold it. Having an in-house Blue and Purple Team is not something we expected from a vendor our size."