Security & Architecture

Air-gapped by design

The NorthLock One never connects to the internet. All inference, indexing, and RAG happens locally.

Update delivery

• You download updates on a computer that has internet.
• You copy the verified file to the appliance over your LAN (or USB).
• Each release is signed and SHA-256 checked before install.

Access control

Accounts are provisioned by your firm admin. We support 2FA and impersonation for support only.

Data residency

All matter data and indices stay on hardware you own.

Detailed controls and certifications available on request.