Air-Gapped Cloud Companion

CABSIS Cloud Remote Companion

The revolutionary zero-inbound-port portal allowing college leadership to monitor live fees, batch registers, and expense graphs from mobile or home—without ever exposing the campus server to the public internet.

Zero Trust Air-Gapped Architecture

How CABSIS Cloud Delivers Remote Visibility Safely

0 Inbound Ports Open
Step 01

Campus Local Server

Cashiers issue bills at sub-50ms speed on the LAN. No open ports, no public internet listening.

✓ 100% Offline Capable
Step 02

Google Drive Cloud DR

Background scheduled sync pushes encrypted database snapshots to your college Google Account.

🔒 Outbound HTTPS Only
Step 03

CABSIS Cloud Portal

Leadership checks live collection metrics and prints reports directly from Drive backups.

🌐 Google SSO Protected
Zero Public IP Required

No expensive static IP or router port forwarding.

No VPN Overhead

Trustees log in seamlessly from phone or laptop.

Read-Only Safety

Remote views cannot mutate cashier billing ledgers.

Institutional Control

Backups stay under your college Google Workspace.

Technical Deep-Dive for Campus IT Deans & Network Engineers

Traditional cloud ERPs require exposing institutional database ports to the internet or setting up fragile IPsec VPN tunnels that slow down remote access. Here is how CABSIS Cloud achieves air-gapped security:

Outbound-Only Push

Zero Inbound Firewall Holes

The campus billing server operates strictly as an outbound client. It communicates with Google Drive APIs over standard HTTPS (Port 443). Your campus firewall blocks all incoming requests.

End-to-End Encryption

Client-Side Encrypted Blobs

Before snapshots leave the campus LAN, SQLite database backups are encrypted with your institution's private AES-256 key, ensuring zero data readability by unauthorized parties.

Google SSO Authentication

Role-Guarded Leadership Access

CABSIS Cloud authenticates users via Google Workspace OAuth. Only email addresses whitelisted by the college board or super administrator can decrypt and inspect financial reports.