Cybersecurity & data protection

Your data stays on your site.

SPIDER is built for defense and industrial sites where data security isn’t optional: on-premises, air-gapped, encrypted, and configured to your site’s cybersecurity requirements.

Air-gapped deployment at a glance

  • HostingOn-premises
  • Internet connectionNot required
  • Data on devicesFIPS-compliant encryption
  • Data on the serverEncrypted at rest
  • Data in transitEncrypted
  • Sensor dataProcessed in memory only
CMMC alignedNIST SP 800-171CUIITARDD 2345 / JCP

Architecture

Deploy the way your site requires.

Run SPIDER fully air-gapped, or connect it to an authorized government cloud. Either way, the network stays under your control.

  1. 1

    SPIDER Hub

    Stores CAD/TDP data, work instructions, and task data, and runs AI processing on-site.

  2. 2

    Local network

    Ethernet to the Hub and encrypted Wi‑Fi to devices, with no internet uplink.

  3. 3

    SPIDER app

    Delivers work instructions and data on headsets and tablets, and caches what it needs to work offline.

  4. 4

    Operator access

    Admins manage the Hub from a browser, with role-based user privileges.

Data handling

How SPIDER handles your data.

From the device to the server, data stays local, encrypted, and under your administration.

On the device

  • COTS edge app

    Runs on iPad, Apple Vision Pro, and other COTS tablets and headsets.

  • IT-managed install

    Deployed through your private app store or MDM. The app holds no customer or TDP data.

  • Transient sensing

    RGB and 3D sensor data for tracking stays in device memory and isn’t stored.

  • Works offline

    Caches CAD models, instructions, and task data, then syncs results later.

On the network

  • Air-gapped

    Runs fully isolated from the internet and the cloud.

  • Encrypted in transit

    All communication between devices and the Hub is encrypted.

  • No cloud required

    Heavier processing moves to your server over the local network or a physical connection.

On the server

  • On-premises SPIDER Hub

    A Linux server manages CAD/TDP data, work instructions, task orders, QA data, and AI processing.

  • Encrypted at rest

    Server data is encrypted at rest, and device data uses FIPS-compliant encryption.

  • Captured on your terms

    3D models and point clouds are created only when a user starts a capture.

  • Your administration

    Operated under your site’s IT and cybersecurity team.

Compliance & readiness

Ready for CUI and export-controlled data.

GridRaster handles CUI and ITAR data in a CMMC-aligned environment, and configures each deployment to your site’s requirements, including network integration and ATO.

Request compliance details
  • CMMC aligned

    Security controls aligned with current CMMC requirements.

  • NIST SP 800-171 compliant

    Controls implemented to protect CUI in non-federal systems.

  • CUI ready

    Established processes for receiving, storing, and processing CUI.

  • ITAR ready

    Equipped to handle ITAR-controlled technical data.

  • DD Form 2345 / JCP certified

    Authorized to receive applicable Militarily Critical Technical Data.

  • Secure deployment

    On-premises, air-gapped, and site-controlled environments.

  • ATO & network integration

    Experience supporting DoW ATO processes and secure network integration.

  • Proven DoW execution

    Multiple programs involving CUI, ITAR, and controlled technical data.

  • FedRAMP-compatible

    Deployable in appropriately authorized government cloud environments.

FAQ

Common security questions.

Don’t see your question? Our team can walk your cybersecurity reviewers through the details.

Does SPIDER work with our cybersecurity provider?

Yes. The architecture works with any cybersecurity provider you prefer.

How is the SPIDER app installed?

The SPIDER app is not on Apple’s public App Store. It has been vetted and approved by Apple and installs on customer-owned devices through a private app store or MDM, both methods recommended by Apple’s Government team. A trial through Apple TestFlight is also available.

Where does the SPIDER Hub run?

The Hub runs locally on a Linux machine, currently an NVIDIA DGX Spark with 128 GB of RAM for on-device AI inference. Its small size lets it fit in tight spaces, including on the base of a mobile robot. Teams access it from any laptop browser, with role-based user privileges. The Hub can also run on your own cloud or an authorized government or public cloud, with minimum and recommended specs provided.

Can we run both air-gapped and real-time edge computing?

Yes. Both air-gapped operation and real-time edge compute streaming are supported. You can move data between the Hub and your other content sources, and cache it on headsets and tablets as your workflow needs.

Does SPIDER connect to our existing systems?

The SPIDER Hub has APIs for third-party systems such as PTC and Teamcenter. SPIDER focuses on 3D mapping, alignment, and data extraction and visualization for the SPIDER app.

What if our site’s security review requires changes?

We are ready to make any modifications that come out of a cybersecurity evaluation at your location. GridRaster handles all data in line with CMMC, NIST SP 800-171, CUI, and ITAR requirements.

Plan your deployment

Discuss your deployment with our team.

Tell us about your site, network, and security requirements. We’ll configure SPIDER to fit them, whether on-premises, air-gapped, or in an authorized government cloud.