Sovereign Intelligence Platform
Deploy enterprise AI in completely isolated networks. No internet connectivity required. Built for defense contractors, classified systems, and critical infrastructure.
An air-gapped deployment means Datacendia runs entirely within your isolated network with zero external connectivity. No internet access. No cloud APIs. No data leaving your infrastructure. This is the only deployment model that meets ITAR, classified processing, and critical infrastructure security requirements.
Air-gapped vs. VPN or firewalled networks: A VPN or firewall-protected network still has internet connectivity—it's just restricted. Air-gapped means physically isolated: no network cables connecting to external systems, no wireless, no cellular. If the network can reach the internet (even through multiple hops), it's not air-gapped.
Important: Air-gapped deployment is more operationally complex than cloud or VPC deployments. The question isn't whether it's easier to use cloud AI—the question is whether your regulatory requirements, threat model, or data classification allow you to accept the risks of external connectivity.
Organizations handling ITAR-controlled technical data, CUI, or classified information cannot use cloud AI. Export control regulations (ITAR, EAR) prohibit foreign access to technical data, and US-based cloud providers can be subject to foreign government legal requests.
Power grids, water treatment facilities, transportation systems, and telecommunications networks are designated critical infrastructure. Air-gapped deployment prevents adversary access to control systems and operational data.
IC agencies process classified intelligence that cannot be exposed to external systems. Air-gapped deployment enables AI analysis of SIGINT, HUMINT, and other classified sources.
Some commercial organizations choose air-gapped deployment for competitive or IP protection reasons, even without regulatory requirements.
Sizing Guidance: The above requirements support 10-20 concurrent users with moderate data volumes. For larger deployments (100+ users, 10TB+ data), contact us for architecture review.
Virtual Machines vs. Bare Metal: Datacendia can run on VMware ESXi, Hyper-V, or KVM virtual machines. However, for maximum performance and GPU acceleration, bare metal deployment is recommended. Ensure your hypervisor supports GPU passthrough if using VMs with GPU.
Objective: Validate infrastructure readiness and identify dependencies.
Objective: Move Datacendia installation packages into the air-gapped environment.
Typical Package Size: 2-5GB compressed (models, application code, dependencies)
Objective: Install Datacendia on isolated infrastructure.
Installation Time: 4-8 hours (depends on infrastructure complexity)
Objective: Connect Datacendia to internal data sources.
Objective: Validate installation and verify no external dependencies.
Objective: Deploy to production users and establish ongoing operations.
Total Deployment Timeline: 4-6 weeks from infrastructure assessment to production. Timeline assumes infrastructure is available and your team has dedicated resources for the deployment.
Datacendia cannot auto-update like cloud software. Updates are delivered as offline packages transferred via approved secure media.
Update Process:
Update Frequency: Major releases: Quarterly. Security patches: As needed (typically 1-3 per quarter). You control when to apply updates—there are no forced updates.
If an update causes issues, Datacendia supports one-command rollback to the previous version. All data and configuration is preserved during rollback.
Datacendia provides long-term support (LTS) versions for customers who cannot frequently update. LTS versions receive security patches for 18 months without forcing feature upgrades.
| Aspect | Cloud SaaS | Air-Gapped |
|---|---|---|
| Setup Time | Hours | Weeks |
| Updates | Automatic | Manual (offline packages) |
| Operational Burden | Low (we manage) | High (you manage) |
| Support Response | Remote access possible | Documentation + screen sharing only |
| Data Sovereignty | Partial | Complete |
| Compliance Options | SOC 2, GDPR, HIPAA | ITAR, Classified, CMMC, All |
Air-gapped deployment requires in-house technical staff to manage the system. Recommended team:
Datacendia provides support for air-gapped deployments via:
We cannot remotely access air-gapped systems, so troubleshooting relies on your team providing logs, screenshots, and configuration details.
Yes. Datacendia is architecturally designed for deployment on classified networks including SIPRNet (SECRET) and JWICS (TOP SECRET/SCI). Deployment follows the same offline package transfer process via approved classified media handling procedures. We're seeking pilot partners with classified network requirements.
Data connectors can be configured through the Datacendia admin interface. No external packages needed unless connecting to a new database type not included in the initial installation.
Datacendia supports high-availability (HA) configurations with automatic failover. In HA mode, if the primary node fails, a secondary node takes over within 15 minutes. You manage the HA infrastructure (we provide configuration guidance).
Yes. Datacendia supports heterogeneous LLM deployment. You can deploy your own fine-tuned models (compatible with HuggingFace Transformers format) alongside or instead of Datacendia's models.
Air-gapped deployment pricing starts at $150K annually (vs. $75K for cloud SaaS). The premium covers offline update packages, extended support model, and architectural consulting for complex deployments. See pricing details.
Schedule an architecture review to evaluate air-gapped deployment for your environment.
Request Briefing →Learn more about sovereignty deployment options or explore compliance frameworks.