> For the complete documentation index, see [llms.txt](https://intelfactor.gitbook.io/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://intelfactor.gitbook.io/docs/home/start-here/deployment-overview.md).

# Deployment overview

Supported deployment modes and what changes between them.

IntelFactor supports three deployment modes. The inspection loop always runs locally.

### Mode A: Fully local (recommended baseline)

Use the full three-zone design.

* **Production Zone (OT):** cameras + edge nodes + local evidence.
* **Site Data Zone:** on-prem dashboards, object storage, registries.
* **Remote Access Zone (optional):** jump host / VPN for support.

This mode requires **no outbound internet** to inspect.

### Mode B: Hybrid (local inspection + optional cloud visibility)

Use Mode A locally. Add a cloud layer for fleet visibility.

* Local inspection and evidence capture are unchanged.
* Site-to-cloud sync is **async**.
* Connectivity loss only delays centralized reporting.

### Mode C: Cloud-hosted business apps + on-prem OT boundary

Use cloud hosting for non-OT systems.

* Marketing site and business apps can live in cloud.
* OT inspection network stays segmented.
* Only approved exports traverse the conduit.

{% hint style="info" %}
If you want a one-page network diagram for your IT/security review, ask. We’ll generate it from your zone choices.
{% endhint %}