FAQ
Short answers.
§1 For owners
What do owners need on their side?
No changes inside their network. The service connects to the owner's existing VPN gateway as a standard peer, if that gateway speaks WireGuard, or IPsec with IKEv2 and a pre-shared key.
Does it replace our VPN gateway?
No. The owner's gateway stays the owner's; the service peers with it.
What if two owners use the same addresses?
They can coexist. Each owner realm has its own place in the service's address realm and every owner host a unique address in it, so two identical addresses in different owners' networks become two different addresses inside the service. The service translates source and destination addresses in both directions, so neither the device's applications nor the owners' hosts need to know about the other side's addressing.
What can the operator do?
The operator can see that traffic flows and can administer the service. The design does not let the operator authorize access to your network, create NAT bindings on your side or loosen your policy, and operator actions are recorded.
§2 For devices in the field
Can a device reach several owners at the same time?
Yes. Access to each owner is independent: it is added when that owner approves, and revoking one leaves the rest in place.
Does it fly the drone?
No. The service defines no command or control traffic class, and the on-board policy is designed to give payload applications no path to the flight controller.
What happens when coverage drops?
In emulation: capture continues on the device, records are signed at capture and delivered in order when a link returns, and the owner can verify the chain. This has not yet been run over real links.
Does it use machine learning?
No. There is no machine learning in the platform.
§3 Status and deployment
Is it tested?
Self-tested in an emulated multi-owner environment. Independent testing is the next step.
Is it in production?
No. It is a working core, not yet in production and not yet run over a real cellular or satellite link.
Can we run it ourselves?
Yes; the licensed-platform model is the lead offer. The licensee runs the whole service in its own network, under its own identity.
How do we take part?
Tenancy is by enrolment only; there is no public sign-up. To discuss a pilot, apply through the pilot form.