An air-gapped system is a computer that has no connection to the internet or any other network. No Wi-Fi. No Ethernet. No Bluetooth to connected devices that have network access. The "air gap" is literal — the only thing between your machine and the outside world is air.
In cybersecurity, air-gapping is the gold standard for protecting sensitive data. Intelligence agencies, military systems, and critical infrastructure use air-gapped networks to ensure that no remote attacker can reach their most sensitive information. For criminal defense attorneys handling evidence that could determine someone's freedom, the same level of protection is warranted.
Defense attorneys have ethical and legal obligations to protect client confidentiality. When you are analyzing body camera footage, witness interviews, or surveillance recordings, you are handling evidence that is often subject to protective orders, attorney-client privilege, and work product doctrine.
A network-connected machine is an exposed machine. Even with firewalls, antivirus, and best practices, network connectivity creates attack vectors:
An air-gapped machine eliminates all of these vectors. If the machine cannot reach the network, data cannot leave the machine. It is the simplest and most effective security control available.
Not every case requires air-gapped analysis. For routine body camera review in misdemeanor cases, a standard secure setup with encrypted storage is usually sufficient. But certain situations demand the highest level of protection:
If you are asking yourself whether a case warrants air-gapped analysis, it probably does.
Any Apple Silicon Mac works for air-gapped FrameCounsel operation. Our recommendations by caseload:
| Mac | Best For | Notes |
|---|---|---|
| MacBook Air M3 | Solo practitioners, light caseloads | Portable, 18-hour battery for courthouse work |
| MacBook Pro M3 Pro | Active defense practices, moderate video volume | Sweet spot of power and portability |
| MacBook Pro M3 Max | Heavy batch processing, long-form surveillance footage | Maximum GPU cores for SAM3 segmentation |
| Mac Studio M3 Ultra | Public defender offices, high-volume operations | Desktop powerhouse for batch processing |
For a true air-gapped setup, purchase a dedicated Mac that will never connect to the internet after initial setup. This is not your daily driver. This is your evidence analysis machine.
Use a SanDisk Professional PRO-G40 Thunderbolt SSD formatted as APFS Encrypted. See our PRO-G40 setup guide for detailed instructions. The evidence drive holds all case files, raw footage, and FrameCounsel project data. The Mac's internal drive holds only the operating system and FrameCounsel itself.
Before the Mac enters service as an air-gapped machine:
For maximum assurance, some practitioners physically disable the Wi-Fi antenna by having an Apple-certified technician remove it. This is optional but provides hardware-level certainty.
FrameCounsel supports fully offline installation for air-gapped environments:
Evidence must move from the source (discovery materials from prosecution, investigator deliveries) to your air-gapped machine. The transfer chain matters:
A typical day on an air-gapped FrameCounsel workstation:
If you need to share reports with co-counsel or the court, export them to a separate USB drive. Transfer that USB drive to an internet-connected machine for email or filing. The evidence drive itself never leaves your air-gapped workflow.
When your analysis is complete and you need to deliver reports:
This separation ensures that raw evidence never touches a networked machine, while your analysis reports can be shared as needed.
An air gap is only effective if it is maintained rigorously:
The air gap is not a technology solution. It is a discipline. The hardware enforces it, but the humans must maintain it.
Download FrameCounsel's offline installer or learn about our security architecture.
Step-by-step guide to using the SanDisk Professional PRO-G40 Thunderbolt SSD as your local, air-gapped evidence vault.
How on-device face recognition technology enables defense teams to identify witnesses and officers in video evidence without compromising privacy.
A technical exploration of the methods used to synchronize body camera, surveillance, and cell phone footage for forensic analysis.
On-device body camera analysis, contradiction detection, and court-ready reports. No credit card required.