IronEvidence
Offline, verifiable backup and recovery for systems where cloud tools are not an acceptable answer.
- Category
- Backup and recovery
- Model
- Industrial license
- Core platform
- ALIA Integrity Core
- Status
- IN DEVELOPMENT
01 Problem
Air-gapped and high-security industrial systems still need backup and recovery, and the cloud tools that dominate the market are not an acceptable answer there. Restores go untested, integrity goes unproven, and audits are answered with assurances instead of evidence.
The cost surfaces on the worst possible day: the day the restore is needed and nobody knows whether it works.
02 Specification
This is the specification we are building toward. The status column shows what exists today.
- Fully offline backup and restoreIN PROGRESS
Backup and restore run entirely offline, with no cloud dependency at any step.
IN PROGRESS - Cryptographic integrity manifestsPROTOTYPE
Every backup carries a sealed cryptographic manifest that proves the data is exactly what was captured.
PROTOTYPE - Deterministic restore testingPLANNED
Restores are tested deterministically and on a schedule, so recovery is a rehearsed procedure instead of a hope.
PLANNED - Tamper detectionPLANNED
Any modification to a backup after capture is detectable and reportable.
PLANNED - Audit-grade evidence artifactsPROTOTYPE
Every backup and restore test produces an evidence artifact an auditor can verify independently.
PROTOTYPE - OT-technician-grade usabilityPLANNED
The system is operable by an OT technician on site, without a security specialist in the room.
PLANNED - Media-failure tolerancePLANNED
Backups survive partial media failure through redundancy designed for long shelf lives.
PLANNED - Compliance packagingPLANNED
Evidence is packaged to answer NIS2-class regulatory regimes without manual assembly.
PLANNED
Updated as capabilities ship. BUILT means working and validated; nothing gets that label early.
03 System
- 01Industrial systems
- 02Offline capture
- 03Sealed integrity manifests
- 04Restore verification
- 05Audit evidence
04 Engineering
Integrity core
IronEvidence is built on our integrity core: content-addressed storage, sealed cryptographic manifests and verification tooling designed to operate with zero online infrastructure. Every artifact is designed to verify from the media alone, with no key server, no certificate authority callout and no network of any kind.
Restore verification
Restore testing is designed as a deterministic, scripted procedure: the same media, the same steps, the same verifiable result, executable by an OT technician on site. Each rehearsal produces an evidence artifact an auditor can check independently.
Deployment model
The product ships as an industrial license and runs entirely inside the protected environment. Nothing about a protected system, including the fact of its backup schedule, ever needs to leave the site.
05 Why this is hard
The genuine problem is delivering strong integrity guarantees with zero online infrastructure, and making restore verification something a technician can actually run. Modern integrity tooling quietly assumes a network: key servers, time sources, revocation checks. Air-gapped environments allow none of it, and a procedure that needs a security specialist in the room will simply not be run. The engineering work is cryptography that verifies from the media alone and a restore rehearsal an OT technician completes without help.
06 Design constraints
- Fully offline at every step
- Verifiable from the media alone
- Operable by an OT technician without a specialist
- Tamper evidence on every artifact
- Survives partial media failure
07 Design partner program
Design partner program.
We are looking for a small number of design and pilot partners. A partner gets the problem solved for their operation first, direct influence on the specification above, and pilot pricing. In exchange we get reality: real constraints, real data, real operators. No external partner is engaged on this product yet.