Apple has published a detailed description of Secure Exclaves, a security architecture in its silicon designed to keep camera and microphone data used for ambient sensing isolated from the main operating system.
Ambient sensing lets a device listen for “Hey Siri”. On the recently introduced HomeView smart display, it enables the recognition of user faces and voices. Secure Exclaves are isolated runtimes that handle camera and microphone data apart from the rest of the device.
“Isolation features added across many core components of the silicon work in tandem to protect Secure Exclaves and keep them segregated from the rest of the system. Data that is processed and analyzed in a Secure Exclave cannot be accessed by the main operating system, apps, or Apple,” the company said.
The design is built around three requirements. The main OS must not be able to pull out or alter data handled in an exclave, and only a narrowly defined set of information may cross over to it. Users must also be able to tell when a sensor session is active, without the main OS interfering.
According to Apple, in background sensing only specific metadata reaches the rest of the system. On HomeView, the recognition result sent to the main OS is a person identifier, position and confidence level, without audio or video data being shared.
When an app requests full sensor access, a dedicated exclave acts as gatekeeper. Sensor data is released only once it has confirmed the indicator is on and has been showing for a sufficient period. On devices such as the iPhone, where the indicator is an on-screen dot, another exclave checks which pixels were actually drawn to the display.
Apple said Secure Exclaves protect person recognition on HomeView, along with Siri Recap and Live Rewind. They also protect the on-screen camera and microphone indicators in iPhone 18 Pro, iPhone 18 Pro Max and iPhone Duo, and the camera indicators in MacBook Neo and HomeView.
The exclaves run on a minimal, capability-based microkernel, to which Apple has been applying formal verification. Apple said this turned up hard-to-spot but critical flaws in many kernel subsystems that could have led to full kernel compromise. Many of these issues were caught early in development.
The microkernel is still under active development and changes often, Apple noted. “Because of these constant changes, we do not claim complete coverage of all aspects of the kernel; instead, formal verification is applied gradually and incrementally to different parts,” it said.
