AMVLET's air-gapped deployment delivers complete sovereign communications inside your classified perimeter — no external services, no internet dependency, no attack surface beyond your own infrastructure.
Every message, call, and file transfer stays within your air-gapped network. The system event log shows internal-only activity — zero external connections, end-to-end encrypted throughout.
Air-gapped environments demand more than standard security software. AMVLET is engineered from the ground up to operate inside your perimeter — indefinitely.
The entire AMVLET platform — homeserver, identity service, media store, push gateway, and administrative tooling — runs inside your air-gapped perimeter. No internet connectivity is required at any stage of operation, including setup, messaging, file transfer, voice calls, or security updates.
Air-gapped environments cannot adopt rapid release cycles. AMVLET ESS PRO includes Long Term Support versions with extended security maintenance windows, SLA-backed performance guarantees, and security patches delivered as offline bundles — cryptographically signed and verifiable before installation. No upgrade pressure, no end-of-life risk.
Degraded, Disconnected, Intermittent, and Low-bandwidth environments are first-class deployment targets. AMVLET is optimised for satellite and mesh network topologies, tactical mobile deployments, and field operations where bandwidth is scarce or connectivity is intermittent. When links restore, state synchronises automatically.
AMVLET's air-gapped architecture is not a stripped-down version of the cloud product. It is the full platform, re-engineered to operate in environments where internet access is prohibited by design.
The entire AMVLET stack is packaged into a secure, self-contained bundle for air-gapped installation. All container images, dependencies, and configuration assets are included. Bundles are cryptographically signed by AMVLET and verified before installation — ensuring the integrity of every component deployed inside your perimeter. Security updates follow the same process: a signed offline patch bundle, delivered through your existing secure transfer channel.
Air-gapped does not mean isolated from your own organisation. AMVLET supports Matrix federation between multiple air-gapped sites — headquarters to field base, classified node to command centre — without routing traffic through any external network. Users on Site A and Site B communicate in shared rooms, with state replicated directly between your internal homeservers. Each site retains full operational capability if the inter-site link is lost.
Most communications platforms degrade or fail under poor connectivity. AMVLET is designed for the opposite: low-bandwidth efficiency, aggressive compression, local caching, and graceful degradation ensure the platform remains usable when links are poor. In full disconnection, the local homeserver continues to operate independently — messages, calls, and files within the local network remain fully functional. When connectivity returns, state synchronises automatically without operator intervention.
When an air-gapped deployment requires controlled connectivity to a lower-classification environment, AMVLET integrates with Cross Domain Gateway hardware. A complete protocol break ensures the two networks never share a network path — content is inspected, sanitised, and re-delivered by the gateway. The air-gapped homeserver is never in direct federation with the low-side network. Learn more about Cross Domain Solutions →
AMVLET's air-gapped deployment supports hardware-embedded encryption using X.509 certificates, binding encryption keys to physical devices rather than software credentials. This eliminates the risk of key export or credential theft — even if a device is compromised, the private key cannot leave the hardware. Combined with Matrix's native end-to-end encryption, communications remain confidential from sender to recipient, with no intermediate decryption at the server level.
An air gap is not a last resort — it is a deliberate architectural choice. When the stakes are high enough, connection itself becomes the vulnerability. The question is not whether to disconnect; it is how to communicate effectively once you do.
Classified and sensitive environments have always faced the same tension: the need for secure, rapid communication on one hand, and the obligation to protect information from external exposure on the other. For decades, the default answer was isolation — if nothing connects out, nothing leaks out. But isolation at the infrastructure level does not solve the human problem.
When the official communications platform is difficult to use, slow, or simply unavailable, people find alternatives. Consumer messaging applications — designed for convenience, not security — end up carrying operational information because they work. This is shadow IT: not a technology failure, but a usability gap that security policy cannot close on its own. The answer is not to ban consumer apps. It is to provide something better.
AMVLET's air-gapped deployment is built on the Matrix open standard, the same protocol behind the consumer-grade SCOVR application. Users get a familiar, consumer-quality interface — GridView room navigation, push notifications through your local gateway, voice and video calling — running entirely within your classified perimeter. When the official tool is as easy to use as the forbidden one, shadow IT loses its appeal.
Air-gapped environments cannot update software on the cadence of a cloud platform. Accreditation cycles are long; change control is rigorous; the cost of re-accrediting a new version can exceed the cost of operating an old one. This is why so many classified environments end up running software that is years out of date — and years past the point where the vendor provides security patches.
AMVLET's Long Term Support programme addresses this directly. LTS releases receive security maintenance for extended periods, with security patches delivered as signed offline bundles that can be staged, tested, and deployed through your existing change control process. The platform stays secure without forcing the pace of your accreditation cycle. Organisations that have spent years maintaining ageing legacy systems because no credible alternative existed now have one — a modern, open-standard platform with the support model that classified environments actually require.
What security teams, information assurance officers, and architects ask when evaluating an air-gapped communications platform.
AMVLET's air-gapped deployment gives classified and sensitive environments a complete, modern communications platform — with zero external dependencies and the support model that sovereign operations require.