Home/News & Publications/Guide

Air-Gapped AI: How a System Without Internet Stays Current

The most common question about physically separated AI systems is: what about updates? The answer is less spectacular than expected — and the real point lies elsewhere: a well-built local system needs far less 'freshness from outside' than cloud vendors claim.

Air-GappedUpdatesCritical InfrastructureSecurityOn-Premise

The Supposed Paradox

Air-gapped means: the system runs on a physically separated network, with no connection to the outside. For critical infrastructure, defence environments, and NDA-bound manufacturing, that is often mandated or simply prudent — the reasons are described here.

The follow-up question arrives reliably in every conversation: "And how does the system stay current?" Behind it sits the justified worry of trading separation for obsolescence — and the cloud world's silent assumption that software withers without a standing connection.

Both deserve an honest answer.

How Updates Work Without Internet

Unspectacularly — and that is exactly the point: updates arrive as a package, not as a connection.

An update is assembled outside your network, brought into your environment on an approved medium, and applied on schedule — in a maintenance window you choose, at a version level you know in advance. At SynapSync, updates are included for three years as standard, extendable.

The often-overlooked advantage over the standing connection: control over timing. No cloud vendor silently pushes a new version overnight that changes your monitoring's behavior by morning. In audited environments, that is not a comfort feature but a requirement: every software state is known, documented, and traceable.

The Real Question: What Needs Freshness at All?

The more interesting question is rarely the update mechanism. It is: what would the system even need a connection for?

  • Detection? No. The system learns the normal signal behavior of your equipment — locally, from live operation. That knowledge lives at your site and improves at your site, not in a data centre. There is no cloud feed that could teach your machine its own normality.
  • The AI assistant? No. The language model runs on your hardware too. It doesn't need to know what happened on the internet yesterday — it needs to know your equipment, alarms, and history. Those live next door.
  • The license? No. No activation servers, no remote revocation — by design. Licensed once, usable indefinitely. A system that must "phone home" periodically to keep working is not air-gap capable, whatever the datasheet says.

What remains are classic software updates (fixes, new functions, security patches) — and the package path covers those.

How to Spot Fake Air-Gap

The market carries offers wearing "air-gap capable" on the brochure and revoking it in the fine print. Three test questions:

  1. Does full functionality run indefinitely without any connection — or only an "offline mode" with reduced scope and an expiry date?
  2. What happens after 12 months without a connection? If the answer involves license checks, mandatory telemetry, or "periodic synchronization," it is not an air gap.
  3. Where does AI inference run? If models compute in the cloud and only results come back, the separation is cosmetic.

With us, air-gap is the delivery state, not a special mode — built for environments where connectivity itself is a risk. How deployment works in practice is covered in the deployment section, and for your environment's specific requirements: talk to us.

← Back to News & Publications