Maury runs a medical supply warehouse spanning two buildings — main warehouse and auxiliary storage. Inventory data is sensitive: product catalogs, stock levels, and supplier pricing. Maury's compliance team needs a guarantee that warehouse data never touches the internet — not a software toggle, not a firewall rule, but a physical impossibility. Paper labels work but 5,000 bins across two buildings is a full-time repricing job.
All four Commander NICs serve Beacons on the AP bridge — there is no WAN port. No WireGuard, no cloud dashboard, no remote management. The Commander is mathematically incapable of reaching the internet.
Data gets in via a signed USB drive and nothing gets out without physical access. The Commander verifies Ed25519 signatures before importing — even physical access with an unsigned drive is rejected. Tamper-proof by design.
HDMI monitor and USB numeric keypad — that's the entire interface. No mouse, no browser, no network login. Fleet status on F1, tag table on F2, push control on F4, USB import on F5. Physical presence required for every operation.
Four Beacons span the main warehouse and auxiliary storage building — one per Commander NIC. 3,000 TAG21 compact bin labels on standard shelving plus 2,000 TAG35 detailed picking labels in fulfillment areas. Staff see everything they need at a glance.
“Our compliance team asked how we guarantee patient data doesn't leak from the warehouse. I showed them the Commander — it doesn't even have an internet cable.”
On compliance
“Five thousand tags across two buildings and the whole thing runs off one box with no internet. My IT guy didn't believe me until I showed him.”
On scale
“The USB process takes five minutes once a month. That's it. The rest of the time we forget the system is there.”
On maintenance
See how Sovereign Shelf fits your security requirements — air-gapped, signed, and physically isolated.