All articles

Offline-first and on-premise: software for disconnected, regulated worlds

Cloud-by-default has a blind spot: the field, the factory floor, the classified network, the regulator. What it takes to build software — and AI — that runs where the data must stay.

The default assumption of modern software is a fast, permanent connection to a public cloud. For a great deal of important work, that assumption is simply wrong. Field teams operate where there is no signal. Factory-floor systems must keep running when the network drops. Defence, healthcare, and finance handle data that legally or contractually cannot leave a controlled environment. And a growing number of organisations want the capabilities of modern AI without sending their most sensitive information to someone else's servers. Building for these worlds is a distinct discipline, and it is one of the areas where careful engineering pays off most visibly.

Offline-first is a design stance, not a feature

Offline capability cannot be bolted on at the end; it is a decision that shapes the whole architecture. An offline-first system treats the local device as the primary source of truth and the network as an optimisation that may or may not be available. The application reads and writes locally and always stays responsive; synchronisation happens in the background when a connection appears. This inverts the usual assumption, and it forces you to confront the genuinely hard question early: what happens when two people, or two devices, changed the same thing while disconnected? Conflict resolution is the heart of offline-first work. Sometimes last-writer-wins is acceptable; sometimes you need to merge changes; sometimes a human has to decide. There is no universal answer, but there is a universal requirement — you must choose a strategy deliberately, per kind of data, because the alternative is silent data loss that surfaces as a furious user weeks later.

On-premise is about control, and control has a cost

Running software inside a client's own environment — their data centre, their private network, sometimes a fully air-gapped system with no internet at all — is often not a preference but a hard requirement of the domain. The benefit is unambiguous: the data never leaves, which for many regulated organisations is the entire point. The cost is equally real. You lose the cloud's managed services and elastic scale; you inherit the environment's constraints; and you have to make deployment and updates work without the assumptions the cloud lets you take for granted. Software built for on-premise has to be genuinely portable, its dependencies explicit and self-contained, its update path designed to work in a place where a person may be walking an installer in on a laptop. This is unglamorous engineering, and it is exactly the kind that separates software that ships into these environments from software that only demos into them.

AI, without giving away the data

The most current version of this problem is artificial intelligence. The obvious way to add AI to a product is to call a hosted model over the internet — which is precisely what a defence agency, a hospital, or a manufacturer with confidential process data often cannot do. The alternative is to run capable models locally, on the organisation's own hardware, so that sensitive documents and proprietary data are used for inference without ever leaving the building. This is now genuinely practical: open models have become good enough, and the tooling to run them efficiently on modest hardware has matured. The engineering shifts from calling an API to a different set of concerns — selecting a model that fits the available hardware, measuring quality and speed honestly against that constraint, and building the retrieval and evaluation layer that makes a local model useful on a specific body of private knowledge. The result is a system that gives an organisation the leverage of modern AI while keeping the one thing it cannot compromise: control of its own data.

The trade-off, stated plainly

None of this is free, and pretending otherwise does clients a disservice. Offline-first and on-premise systems ask for more careful design, more explicit handling of the cases the cloud papers over, and a higher standard of portability and self-sufficiency. In return they run where cloud-default software cannot go at all: in the field, on the factory floor, inside the regulated boundary, on the private network. For the organisations whose most important work lives in exactly those places, that is not a niche requirement — it is the whole requirement, and it is worth engineering for properly.

Have a system like the ones we write about?

We start most engagements with a two-week audit. It ends in a plan you can fund.

Book a discovery call