What is air-gapped AI? A plain guide for security teams
Air-gapped means a computer or network has no connection to the internet. There is a “gap of air” between it and the outside world. Data can only cross that gap deliberately, for example on an approved update file that your own team checks before installing.
Air-gapped AI applies that to an AI system. The language model, the index of your documents and all the conversation logs run on machines that cannot reach the internet. A question about a contract, a salary sheet or a patient record physically cannot be sent to an outside AI provider, because there is no route out.
Air-gapped, on-premise and private cloud
These terms get mixed up. In order of strictness:
| Setup | Where it runs | Can it reach the internet? |
|---|---|---|
| Cloud AI (ChatGPT, Copilot) | The provider’s servers | Your data travels to them |
| Private cloud | A cloud account only you control | Yes, unless you block it |
| On-premise | Your own servers | Yes, unless you block it |
| On-premise, outbound blocked | Your own servers | No outbound traffic allowed |
| Fully air-gapped | Your own isolated network | No connection at all |
Most companies get nearly all the protection from on-premise with outbound traffic blocked: the servers sit on your network, staff can reach them, but the servers themselves cannot send anything out. Full air-gapping suits defence, critical infrastructure and some banking systems.
Why it matters for AI specifically
Staff paste confidential material into public chatbots because it is fast. Surveys in 2026 put data leakage at the top of AI concerns: 61% of financial-services respondents in a Cloud Security Alliance survey, and 78% of US companies in a Utimaco survey. Banning the tools tends to push use into the shadows rather than stop it. An AI that cannot send data out removes the risk at the source.
How to verify an “air-gapped” claim
A vendor’s word is not evidence. Your security team can check:
- Block all outbound traffic from the AI servers at your firewall, then use the product. It should still work.
- Watch the network during use: there should be no connections to outside addresses.
- Check the update path: updates should arrive as files you approve, not silent downloads.
- Read the logs: questions and answers should be stored on your servers, where you can audit them.
KeepInside products run on your servers with outbound traffic blocked, and every pilot includes that test. See how we keep data in, or book a demo and we will run it with the internet switched off.
Questions people ask
What does air-gapped mean?
A system is air-gapped when it has no network path to the internet or to other untrusted networks. Data can only enter or leave through controlled, deliberate steps, such as an approved update file.
What is air-gapped AI?
An AI system, including the language model, search index and logs, that runs on machines with no internet connection. Questions and documents physically cannot be sent to an outside AI provider.
Is on-premise the same as air-gapped?
No. On-premise means the system runs on your own servers. Air-gapped is stricter: those servers also have no route to the internet. Most companies start on-premise with outbound traffic blocked, which gives most of the protection with easier updates.
How do air-gapped AI systems get updates?
Through update packages that are checked and installed by your own team, rather than downloaded automatically. The model and software only change when you decide.