Home / Glossary / Air-gapped communications
On-premise & sovereign communications

What Are Air-Gapped Communications?

The most secure network in the world is the one an attacker can't reach at all. For the organisations that handle the nation's secrets, that isn't a metaphor — it's a wire that was never connected.

In short

Air-gapped communications run on an isolated network that has no link to the public internet. A truly air-gapped phone system can be installed, licensed, updated and operated entirely offline — removing the single largest attack path.

Why air-gap at all

An air gap removes the attack surface that matters most: remote access over the internet. If the system can't be reached from outside, it can't be scanned, phished into, or remotely exploited. For defence establishments, intelligence, nuclear and critical-infrastructure operators, this is standard practice for anything sensitive.

Communications are a prime candidate for air-gapping, because calls and their recordings are some of the most sensitive data an organisation produces.

What makes a system truly offline-capable

Many “on-premise” systems still quietly depend on the internet — to activate a licence, pull updates, or reach a cloud service for some feature. In an air-gapped site, any of those dependencies breaks the system.

A genuinely air-gapped communications platform must: bundle every component in one installer with nothing downloaded at install time; verify its licence from a signed offline file; update from carried-in signed media; and provide every feature — voice, video, messaging, recording — without reaching out. If it needs the internet for anything, it isn't air-gapped.

The capability only a few can offer

This is precisely where the global communications giants cannot follow. Their entire model is multi-tenant public cloud; an offline, isolated deployment is the opposite of how they're built. A self-hosted platform designed for air-gap from the ground up can serve buyers the cloud vendors structurally cannot — which is why air-gapped capability is less a niche feature than a durable competitive moat.

Frequently asked questions

Can you still have video conferencing on an air-gapped network?

Yes. Voice, video, WebRTC and messaging can all run on an isolated internal network between internal participants and SIP room systems. What you give up is calling the outside world — by design.

How do air-gapped systems get updates?

Through carried-in, cryptographically signed media that is verified before it's applied. The update never crosses the internet; it crosses the air gap on controlled media.

Keep reading
Next: Data sovereignty →
See how Bulwark Voice Suite handles this by default
Bulwark Voice Suite is a self-hosted VoIP, video and messaging platform that ships these controls on from first boot — encrypted, highly available, and able to run fully offline.
Explore Bulwark Voice Suite Size a deployment