Air-gapped deployment
Document collaboration inside
an isolated network.
Real-time editing, comments, version history and search do not need the internet. They need a network. ShimoDocs runs the full collaboration surface inside an air-gapped enclave, installed from offline packages and with nothing calling out.
Why an air gap changes the design, not the features
Most collaboration platforms assume three outbound dependencies: licence validation, update checks, and a hosted AI endpoint. Any one of them turns an isolated network into a broken deployment. Removing them is an installation-time property, not something you configure afterwards.
ShimoDocs installs from offline image packages and the deployment guide documents the isolated path explicitly, alongside the online one. The installer accepts an external middleware address instead of bundling its own, so the suite can be pointed at infrastructure that already exists on the isolated side.
What crosses the gap
Four things, and all of them are ordinary files. That matters because it means the deployment can be built and refreshed through whatever controlled transfer process your environment already uses, rather than requiring a network connection to be opened.
- The installer binary for the architecture you run, amd64 or arm64
- The offline image tarball, which carries the container images the deployment needs
- The licence file, obtained separately and activated from the operations platform
- Any external middleware packages, if you are running MySQL, Redis, MongoDB or Kafka yourself
Because a licence is a file rather than a phone-home check, enabling the suite on an isolated network does not require a temporary connection. The free perpetual licence for teams of up to five people is issued the same way.
AI without outbound access
The usual casualty of an air gap is AI assistance, because hosted model APIs are unreachable by definition. The AI configuration layer in ShimoDocs points at an endpoint you specify, which on an isolated network means a model served inside the enclave.
That turns prompt and document context into internal traffic that your existing network controls already cover. If no model is available in the enclave, the collaboration features are unaffected — AI is an addition to the suite, not a dependency of it.
What you genuinely lose
It is more useful to be specific than to claim nothing changes. Three categories of feature depend on reaching the public internet and stop working on an isolated network.
- Third-party integrations that call out to an external service on the user behalf
- Public link sharing to recipients outside the enclave, for the obvious reason
- Any AI model that is only available as a hosted API rather than something you can run
Everything in the collaboration core — real-time co-editing, comments and suggestions, version history, document-level permissions, audit logs, forms, spreadsheets, presentations and search — is internal traffic and works normally.
Keeping an isolated deployment maintainable
The failure mode of air-gapped systems is not the initial install; it is that nobody can upgrade or diagnose them two years later. Two things in the operations platform are aimed squarely at that.
Upgrades are applied by uploading an installation package, with the platform running its own compatibility checks before it starts — so the transfer process produces a reviewable event rather than an automatic change. And when something does go wrong, the operations platform carries the diagnostic surface inside the enclave: service and real-time logs, middleware inspection, cluster management, container packet capture and a monitoring metrics reference, with no external observability service required.
What to plan for before the first transfer
- The architecture you are deploying on, amd64 or arm64
- A controlled transfer process for files, and who signs it off
- Whether middleware is bundled in the package or already present in the enclave
- A licence file requested in advance, not during the install window
- A decision on whether an in-enclave model endpoint will be available for AI
- A backup target inside the enclave, tested with a restore
Frequently asked questions
Can you run document collaboration in an air-gapped network?
Yes. It requires a deployment that can be installed from offline image packages, performs no licence call-out at runtime, and does not depend on a hosted model endpoint. ShimoDocs documents the offline installation path and supports external middleware on the isolated side.
How does AI work in an air-gapped deployment?
The AI configuration layer points at a model endpoint you choose. In an isolated network that means a model served inside the boundary, so no prompt or document context leaves the enclave. If no model is available, the collaboration features work without it.
What has to be transferred across the air gap?
The installation package, the offline image tarball, the licence file and any middleware you run externally. All four are ordinary files, which is why the deployment can be built and refreshed through a controlled transfer process rather than a network connection.
Does an air-gapped deployment lose any features?
You lose the features that are inherently online: third-party integrations that call out, public link sharing to the internet, and any AI model that is only available as a hosted API. Real-time editing, comments, version history, permissions, audit logs and search all work normally.
How are upgrades handled without internet access?
The operations platform accepts an uploaded installation package and runs its compatibility checks before applying it. On an isolated network the package is brought across by the same controlled transfer used for the original installation, so upgrades follow a reviewable process rather than an automatic one.