On-box AI agents
Run AI agents with on-box LLMs and local GPU compute to assist authorized agency workflows.
Explore the layer+PRIVATE DATA. SOVEREIGN INTELLIGENCE.
The Air-Gapped
AI Data Factory™
Bring your data together.
Put intelligence to work.
Keep control of every layer.
A secure platform for public safety and government.
A private data foundation for developers building offline.
AI agents. Security & SIEM. Analytics. All on-box.
Private by designAir-gap deployable
Your AI Data FactoryLAYERS 00–04
LAW ENFORCEMENT DATA EXAMPLEINGEST → ORGANIZE → PROTECT → ACT
911 CAD
Legacy RMS
Body cameras
Drone video
In-car video
Witness statements
Uploaded case materials
01ONE FOUNDATION. TWO WAYS FORWARD.
Built for your mission.
Ready for what you build.
Use Hawkeye to power your organization.
Or make it the foundation of your next application.
YOUR AGENCY. YOUR INFORMATION.
Keep sensitive data close.
Bring the whole picture together.
Connect operational records, case materials, and media inside an environment you control. Turn fragmented information into useful, protected intelligence for authorized teams.
Explore agency workflows01
Unify the operational picture
CAD, RMS, documents, and media in one private foundation.
02
Work within your boundaries
On-box security/SIEM, tenant isolation, and agency access controls.
03
Put on-box intelligence to work
AI agents and analytics with local models and GPUs.
02THE PLATFORM, LAYER BY LAYER
From raw information
to mission-ready intelligence.
HOST + ISOLATE + DEPLOY
Layer 0. Your on-box application runtime.
The Hawkeye Hypervisor is the bare-metal foundation beneath the private data lake. It runs directly on the physical server and lets developers deploy their applications on-box in isolated virtual machines alongside Hawkeye platform services.
- Type-1 hypervisor for bare-metal installations
- Isolated virtual machines for developer applications
- Allocate CPU, memory, storage, and supported GPU resources
- Keep your app code independent; connect through APIs and MCP
Your applicationIndependent codebase · on-box deploymentDEPLOY
LAYER 00Hawkeye Hypervisor™
Bare-metal host → isolated application VM → local platform services
On-box security & SIEM
Monitor security events, endpoints, and data access inside your Hawkeye deployment—even when air-gapped.
Explore the layerOn-box analytics
Query and analyze private data locally. Explore patterns and prepare insights without sending data to an external analytics service.
Explore the layerLayer 0 to local AI. One private application foundation.NO CLOUD INFERENCE REQUIRED
03DEPLOY ON YOUR TERMS
Where your mission goes,
Hawkeye goes.
Choose the footprint. Define the boundary.
Keep the architecture working for you.
DEDICATED PERFORMANCE
Your servers. Your full compute capacity.
Install the Hawkeye Hypervisor directly on your bare-metal server. Deploy your own application in an isolated virtual machine on the same box as Hawkeye services, with local data, databases, pipelines, and AI reached through scoped APIs and MCP.
Bare metal · Hawkeye Hypervisor
HAWKEYE
Hawkeye services
Your application VMs
Local GPU compute
Private network · air-gap capable
04YOUR APPLICATION FOUNDATION
Your Application
on a powerful private foundation.
Your data lake. Your PostgreSQL database.
Your local AI. Your application code stays your own.
Hawkeye provides the private data and AI services behind your application: a multi-tenant data lake, PostgreSQL database, ETL / ELT pipelines, structured and unstructured search, and on-box models and GPUs. Build your interface and business logic in a separate codebase, then connect through APIs and MCP Server. On bare metal, deploy your application directly on-box in an isolated virtual machine on the Hawkeye Hypervisor.
YOUR APPLICATION · SEPARATE CODEBASE
Case toolsWorkflowsCustom apps
APIs+MCP Server
™PLATFORM SERVICES Private data lake PostgreSQL database ETL / ELT pipelines Structured + unstructured search GPU + local LLM library EWF (.E01) evidence export On-box AI agents On-box security & SIEM On-box analytics
00
Hawkeye Hypervisor™Layer 0 · bare-metal foundation
Deploy your application directly on-box in an isolated virtual machine alongside Hawkeye services.
Applications and platform services share the on-box infrastructure while retaining separate codebases and access boundaries.
01// Illustrative integration pattern
02// Your application remains a separate codebase.
03
04const context = {
05 tenant: "agency-workspace",
06 source: "authorized-case-materials",
07 services: [
08 "data-lake", "postgresql", "pipelines",
09 "structured-search", "unstructured-search",
10 "on-box-agents", "on-box-analytics"
11 ]
12};
13
14// 1. Authenticate with scoped permissions
15// 2. Request authorized data through an API
16// 3. Use on-box AI agents and analytics
17// 4. Return results to your application
Illustrative integration pattern · not an API specification
Independent by designYour app uses Hawkeye services through APIs and MCP; it remains a separate application.
Find your deploymentBUILD YOUR APPLICATION ON HAWKEYEA complete private foundation,
A complete private foundation,
from data intake to local inference.
Explore the services your application can use through Hawkeye, with operations kept inside your chosen deployment boundary.
YOUR APPLICATION'S DATA LAYER
The data lake for your app. And the database behind it.
Use Hawkeye as your application's private data foundation. Bring files, operational records, and media into the data lake, and use PostgreSQL for relational application data. Access the services through APIs and MCP while keeping your application in its own codebase.
Private data lake + PostgreSQL
Keep original files, documents, and media in the lake. Use the PostgreSQL database for structured records, relationships, and application state.
ETL / ELT pipelines for your data
Ingest, validate, normalize, transform, and enrich information. Build repeatable pipelines from source systems to the datasets your application consumes.
Structured + unstructured search
Query structured tables and search unstructured documents, transcripts, and extracted media metadata. Return tenant-authorized results with links to their sources.
Your application dataSource systems · files · documents · media
ETL / ELT pipelines
Private data lakeOriginal + processed data
PostgreSQLRelational app database
Structured queriesTables + relationships
Unstructured searchDocuments + extracted text
Tenant-scoped APIs + MCP
Your independent applicationYour interface · your business logic · your codebase
Configure isolation, replication, recovery, and GPU capabilities for the selected infrastructure. Validate each deployment against your application's operating requirements.
IDE
MEET THE HAWKEYE IDE™
Your idea. Your local AI. Your application.
Vibe code with an on-box LLM, your approved datasets, and Hawkeye features. Plan, build, and test a separate application, then deploy it offline on your private foundation.
05TRUST STARTS AT THE SOURCE
Built with
Digital Forensic
Principles.
Preservation, provenance, traceability, and controlled access belong at the foundation of your data workflows.
Export supported forensic images in EWF (.E01) format. Verify image integrity and every segment, include hash manifests and chain-of-custody records, and require examiner review before release for court presentation.
Forensic outcomes depend on your configured procedures, controls, and validation.
EWF EVIDENCE EXPORT · BUILT WITH DIGITAL FORENSIC PRINCIPLES
Verifiable evidence.
Prepared for court review.
Bring the evidence and its history together. Hawkeye's evidence workflow supports Expert Witness Format (EWF) export in .E01 for supported forensic disk and volume images, with validation and custody records for examiner review.
.E01EXPERT WITNESS FORMATOn-box · tenant-scoped · auditable
STEP 01 · PRESERVE
Start with a documented source.
Associate the evidence with its case, tenant, acquisition record, and original integrity values. Preserve the acquired image with controlled access; use working copies for ETL, search, and AI analysis.
- Document acquisition method, scope, operator, and tool version
- Record collection timestamps, time zone, and any acquisition errors
- Keep original evidence separate from derived records and AI outputs
Preserved image + acquisition record
Preserved forensic imagePrivate data lake · original baseline
Authorized case / tenant scope
On-box EWF export.E01 + continuation segments
Read back · compare · document
Integrity verificationEvidence hash + delivery-file manifest
Validation complete + examiner approval
Controlled evidence releaseImage set · custody · validation report
Export and verification can run offline
EXPLORE THE VERIFICATION GATE
Illustrative outcomes. This page does not process or export evidence.
Eligible for examiner reviewPassing checks still require documented approval.
Image set + supporting records
Deliver the .E01 image and all segments with an evidence inventory, SHA-256 manifest, verification report, acquisition and export notes, and chain-of-custody record.
Native files keep their identity
Preserve video, documents, and third-party productions in their original formats with hashes and provenance. Export them as companion evidence when appropriate. A file bundle is not an original forensic disk acquisition.
Controlled, reproducible release
Apply case permissions, legal holds, retention rules, and release approvals. Log exports in the on-box SIEM and keep AI summaries clearly identified as derived work products.
Prepared for court review, with the record to support it. Admissibility depends on lawful collection, validated methods, authentication, custody, and the applicable court rules; the .E01 format alone does not establish admissibility. Validate the configured workflow and receiving tools before operational use.
06YOUR PROCEDURES, IN PRACTICE
Map your data workflow to your
agency procedures and policies.
Make each step intentional—from intake to human review.
STEP 01 · INVESTIGATION
Receive with purpose.
Bring case materials, RMS records, and witness statements into the case workspace.
AGENCY POLICY CHECKPOINT
Verify the case assignment and source context.
Source materials linked to the case
Illustrative workflow · configure to your agency's policy
YOUR MISSION. YOUR INFRASTRUCTURE. YOUR INTELLIGENCE.
Keep your data close.
Take your capabilities further.
The Air-Gapped AI Data Factory™.