Apple has published a detailed description of Secure Exclaves, an architecture that isolates ambient camera and microphone data from the main operating system on HomeView and its newest iPhones. The write-up appeared on Apple's security blog and was covered by SecurityWeek on November 14, 2026.
What Secure Exclaves Do
Secure Exclaves are isolated runtimes built into Apple silicon. They process data for ambient sensing features such as "Hey Siri" detection and, on the HomeView smart display, face and voice recognition.
Apple states that data processed in an exclave cannot be accessed by the main operating system, apps, or Apple. Several isolation features across core silicon components work together to keep the exclaves segregated.
Design Requirements
According to Apple, the design had to meet three requirements:
- The main OS cannot extract or alter exclave data.
- Only a narrow set of information may cross over to the main OS.
- Users must be able to see when a sensor session is active, without the main OS being able to interfere.
How Data Flows
For background sensing, only specific metadata leaves the exclave. On HomeView, the main OS receives a person identifier, a position and a confidence level, but no audio or video.
When an app requests full sensor access, a dedicated exclave acts as a gatekeeper. It releases sensor data only after confirming that the privacy indicator is on and has been displayed for a sufficient time. On devices such as the iPhone, where the indicator is an on-screen dot, a separate exclave checks which pixels were actually drawn on the display.
Where It Is Used
- HomeView: person recognition and the camera indicator
- Siri Recap and Live Rewind
- On-screen camera and microphone indicators on iPhone 18 Pro, iPhone 18 Pro Max and "iPhone Duo"
- The camera indicator on MacBook Neo
Microkernel and Formal Verification
The exclaves run on a minimal, capability-based microkernel. Apple applied formal verification to it, which found hard-to-spot but critical flaws in many kernel subsystems that could have led to full kernel compromise. Many were caught early in development.
Apple is candid about the limits: the kernel is under active development and changes often, so the company says it does not claim complete verification coverage. Formal verification is being applied gradually and incrementally.
Why It Matters for Defenders
- The model removes a whole class of attacks where a compromised kernel or app silently turns on a camera or microphone, since the indicator check happens outside the main OS.
- Claims of "Apple cannot access it" are architectural here, not just policy, but they remain vendor statements until independently reviewed.
- Security teams assessing device fleets can use the published design as a reference point when evaluating sensor-privacy controls.