SecureEdge is a voice-first assistant for managed iPhones and iPads that runs open-weight language models entirely on the phone. Dictate, import documents, ask questions about sensitive material, and run workflows, with no cloud, no account, and no path out.
iPhone 15 or later, iOS 26. Distributed through Apple Business Manager and your MDM. Not a classified system.
Audit log
Chain verified · 1,284 entries
Built for
Staff officers, logisticians, medics, and analysts on MDM-managed iPhones under an unclassified mobility program.
Cleared engineering firms and program offices that need on-device AI that fits a CMMC Level 2 control set.
Coalition partners who want inspectable, open-weight models on Apple hardware they already manage.
Law enforcement, emergency management, healthcare, and legal teams that cannot send records to a cloud model.
What it does
The commodity parts, an offline chat and a model picker, are table stakes. The product is the provisioning, the policy, and the paper trail around them.
Speak field notes, handoffs, and reports. Apple's on-device recognizer transcribes, the model removes filler and self-corrections, and your unit's vocabulary is honored.
Chat with a Gemma 4 model over pasted text, dictated notes, and imported files. Streaming responses, image attachments, and a model picker gated by policy.
Import PDF, text, RTF, and images with on-device OCR into an encrypted library. Search it locally and ask questions about what is in it.
Summarize, key points, action items, SITREP draft, extract entities, formal rewrite, describe image, translate to English. Custom workflows when policy allows.
Policy arrives through managed app configuration; models arrive as signed bundles. No in-app toggle can loosen a value an administrator set.
Every policy load, model load, prompt, response, import, export, screenshot, and purge is a link in a SHA-256 hash chain that verifies on the device.
How provisioning works
Policy and models flow in through the MDM you already run. Nothing flows back out.
Your MDM (Intune, Jamf, Ivanti, Workspace ONE) delivers a managed app configuration: allowed models, retention, trusted signing keys, and feature flags. A malformed push fails closed.
Model bundles reach the device by MDM asset push, Files, a pilot build, or (App Store build only) a download you start. On every load the app checks the Ed25519 manifest signature against your keys and streams the file through SHA-256.
Managed builds contain no networking code, so there is nothing to phone home with. The App Store build connects only when you choose to download a model. Inference runs on the Metal GPU. Airplane mode changes nothing.
The seadmin command-line tool generates signing keys, authors and signs bundle manifests, verifies bundles, and emits the managed-configuration plist or Intune JSON. The full key reference is on the security overview.
Device requirements
The hardware floor is set by the language model, not by iOS. Every phone that clears it also runs iOS 26, so the OS floor costs nothing.
| Requirement | Value | Why |
|---|---|---|
| Minimum iOS | iOS 26.0 / iPadOS 26.0 | DISA publishes an iOS 26 STIG, so managed DoD fleets can run it. |
| Minimum iPhone | iPhone 15 (A16, 6 GB) | Oldest phone that runs Gemma 4 E2B at usable token rates. |
| Recommended iPhone | iPhone 15 Pro or later (A17 Pro+, 8 GB) | Required for Gemma 4 E4B and the vision-capable variant. |
| iPad | Any iPad on iPadOS 26 with 8 GB | Same per-model gating as iPhone. |
| Distribution | Apple Business Manager custom app, or MDM-managed install | Policy comes from managed app configuration, not from the user. |
| Network | None required | Managed builds contain no networking code. The App Store build connects only when you choose to download a model. Inference works the same in airplane mode. |
Per-model gating reads the minimum-RAM field in each bundle manifest and checks it against physical memory. Models the device cannot run appear in the picker with the reason and cannot be loaded. A Mac build is planned.
Compliance posture
We are careful with these words. SecureEdge does not hold a FedRAMP authorization, an ATO, or a CMMC certification, and we will not imply otherwise. What it does is give your security officer the controls and the evidence to make the case.
Encrypted storage, administrator-set retention, MDM-enforced policy, and a tamper-evident audit log map to the access control, audit and accountability, media protection, and system and communications protection families. We supply the control mapping; your assessor makes the determination.
The app reads Apple managed app configuration and never writes back. It runs on iOS 26, for which DISA publishes a STIG, and inherits device-level controls such as screenshot restriction and passcode policy from your MDM.
Data at rest uses iOS Data Protection class Complete. Signature and hash checks use Apple's CryptoKit. We do not ship our own cryptographic primitives.
Gemma 4 is open-weight under Google's Gemma Terms of Use, and the catalog will always include an Apache 2.0 model. The LiteRT-LM runtime is pinned to a specific release and checksum so the compliance package references one auditable artifact.
SecureEdge is not a classified system. A consumer iPhone with an App Store app is not an accredited system for anything above CUI, and we do not position it as one. Classified-tier work is out of scope unless undertaken with an accredited integrator.
Services
SecureEdge is the app. The model is where the risk lives. We fine-tune small models for your workflows and evaluate any model, ours or yours, before it ships as a signed bundle.
Gemma-class models adapted to your vocabulary and workflows with LoRA and quantization-aware training, inside a boundary you control, delivered as a signed LiteRT-LM bundle validated on the devices you deploy.
A documented, reproducible search for backdoors, planted or accidental: fixed-trigger, behavioral and contextual, image-borne for vision models, data-poisoning artifacts, and supply-chain integrity, plus the evaluations you specify.
Pilots
Tell us which MDM you run and which community would use it first: a staff section, a medical unit, a contractor engineering team. We will reply with a signed pilot bundle and a configuration profile.