Cybersecurity & data protection
SPIDER is built for defense and industrial sites where data security isn’t optional: on-premises, air-gapped, encrypted, and configured to your site’s cybersecurity requirements.
Air-gapped deployment at a glance
Architecture
Run SPIDER fully air-gapped, or connect it to an authorized government cloud. Either way, the network stays under your control.
Stores CAD/TDP data, work instructions, and task data, and runs AI processing on-site.
Ethernet to the Hub and encrypted Wi‑Fi to devices, with no internet uplink.
Delivers work instructions and data on headsets and tablets, and caches what it needs to work offline.
Admins manage the Hub from a browser, with role-based user privileges.
An IL5 government cloud hosts the identity and access console.
Traffic passes through your existing firewall and core switch.
Runs in firewall mode and controls every connection into the SPIDER network.
The Hub, switch, and access point serve headsets on a segmented, encrypted network.
Data handling
From the device to the server, data stays local, encrypted, and under your administration.
Runs on iPad, Apple Vision Pro, and other COTS tablets and headsets.
Deployed through your private app store or MDM. The app holds no customer or TDP data.
RGB and 3D sensor data for tracking stays in device memory and isn’t stored.
Caches CAD models, instructions, and task data, then syncs results later.
Runs fully isolated from the internet and the cloud.
All communication between devices and the Hub is encrypted.
Heavier processing moves to your server over the local network or a physical connection.
A Linux server manages CAD/TDP data, work instructions, task orders, QA data, and AI processing.
Server data is encrypted at rest, and device data uses FIPS-compliant encryption.
3D models and point clouds are created only when a user starts a capture.
Operated under your site’s IT and cybersecurity team.
Compliance & readiness
GridRaster handles CUI and ITAR data in a CMMC-aligned environment, and configures each deployment to your site’s requirements, including network integration and ATO.
Request compliance detailsSecurity controls aligned with current CMMC requirements.
Controls implemented to protect CUI in non-federal systems.
Established processes for receiving, storing, and processing CUI.
Equipped to handle ITAR-controlled technical data.
Authorized to receive applicable Militarily Critical Technical Data.
On-premises, air-gapped, and site-controlled environments.
Experience supporting DoW ATO processes and secure network integration.
Multiple programs involving CUI, ITAR, and controlled technical data.
Deployable in appropriately authorized government cloud environments.
FAQ
Don’t see your question? Our team can walk your cybersecurity reviewers through the details.
Yes. The architecture works with any cybersecurity provider you prefer.
The SPIDER app is not on Apple’s public App Store. It has been vetted and approved by Apple and installs on customer-owned devices through a private app store or MDM, both methods recommended by Apple’s Government team. A trial through Apple TestFlight is also available.
The Hub runs locally on a Linux machine, currently an NVIDIA DGX Spark with 128 GB of RAM for on-device AI inference. Its small size lets it fit in tight spaces, including on the base of a mobile robot. Teams access it from any laptop browser, with role-based user privileges. The Hub can also run on your own cloud or an authorized government or public cloud, with minimum and recommended specs provided.
Yes. Both air-gapped operation and real-time edge compute streaming are supported. You can move data between the Hub and your other content sources, and cache it on headsets and tablets as your workflow needs.
The SPIDER Hub has APIs for third-party systems such as PTC and Teamcenter. SPIDER focuses on 3D mapping, alignment, and data extraction and visualization for the SPIDER app.
We are ready to make any modifications that come out of a cybersecurity evaluation at your location. GridRaster handles all data in line with CMMC, NIST SP 800-171, CUI, and ITAR requirements.
Plan your deployment
Tell us about your site, network, and security requirements. We’ll configure SPIDER to fit them, whether on-premises, air-gapped, or in an authorized government cloud.
