Foceon / Platform / Security & trust
Your recipes never leave the fab
Precision-optics recipes are the crown jewels. Foceon is built to run on-prem and air-gapped, keep your data on-site, and hold machine action inside hard safety limits, with an auditable record of every move.
How trust is engineered
Data stays on-site
Recipes, metrology, and models remain on your infrastructure, on-prem or air-gapped.
Bounded action
Agents act only inside hard interlocks and operator-approved envelopes.
Every move logged
Each action is recorded against the twin for review and traceability.
You hold the switch
Operators can revert any agent to advisory mode at any time.
Deployment on your terms
Security starts with where the software runs.
On-prem and air-gapped
The full control loop runs inside your network. No optics data has to cross your boundary for Foceon to work.
- On-prem deployment
- Air-gapped option
- No external dependency to run
Least privilege by default
Access to machines and data follows least privilege, scoped to the agents and people who need it.
- Role-based access
- Scoped machine control
- Auditable permissions
How action stays safe
Advise first
Agents advise operators until predictions are trusted.
Bound the envelope
Approved action stays inside hard machine interlocks.
Log everything
Every action is recorded against the digital twin.
Revert on demand
Any agent can be returned to advisory mode instantly.
Where security stands
The compliance path
- Now
SOC 2 Type I
Controls designed and assessed at a point in time.
- Next
SOC 2 Type II
Operating effectiveness of controls over a period.
- Ongoing
Customer reviews
We support your security review and questionnaires.
- Future
Sector standards
Alignment with defense and aerospace supplier requirements.
Security terms
- Air-gapped
- A deployment with no connection to external networks.
- Least privilege
- Granting only the access a role strictly needs.
- Interlock
- A safety constraint preventing unsafe machine action.
- SOC 2
- An audit framework for security, availability, and confidentiality controls.
Cloud SaaS versus Foceon
| Property | Cloud SaaS | Foceon |
|---|---|---|
| Data location | Vendor cloud | Your site |
| Air-gapped option | No | Yes |
| Machine action | n/a | Bounded |
| Audit trail | Partial | Full |
Trust in a fab is not a policy document. It is the guarantee that nothing you built walks out the door.
Foceon security posture
Security questions
Does our data leave the site?
No. Foceon runs on-prem or air-gapped and keeps your data on-site.
What if an agent misbehaves?
Action is bounded by interlocks and can be reverted to advisory instantly.
Are you SOC 2?
Type I is in place and Type II is in progress; we support your review.
Who can control machines?
Access is role-based and least-privilege, scoped and auditable.
Review Foceon with your security team
Book a session and we will walk your team through deployment, access, and audit.