Apple has described how its Secure Exclaves architecture isolates camera and microphone data used for background sensing from the main operating system. As SecurityWeek reports, Apple says the design restricts what sensor information reaches software and makes sensor indicators work independently of the main operating system.
The protections cover specific features and devices. Apple says Secure Exclaves protect person recognition, Siri Recap and Live Rewind on its recently introduced HomeView smart display. They also protect on-screen camera and microphone indicators on iPhone 18 Pro, iPhone 18 Pro Max and iPhone Duo, plus camera indicators on MacBook Neo and HomeView.
What reaches the operating system
Ambient sensing allows a device to monitor for a trigger, such as “Hey Siri,” or recognize faces and voices on HomeView. Secure Exclaves are isolated software environments that process camera and microphone data separately from the rest of the device.
Apple says isolation features across its silicon work together to prevent the main operating system, apps and Apple itself from accessing data processed and analyzed inside an exclave.
The architecture has three requirements: the main operating system must be unable to extract or alter data handled inside an exclave; only a narrowly defined set of information may leave it; and users must be able to tell when a sensor session is active without interference from the main operating system.
HomeView provides a concrete example. During background person recognition, Apple says the main operating system receives a person identifier, position and confidence level—the system’s estimate of how certain the recognition is. It does not receive the underlying audio or video.
Checking that sensor indicators are visible
When an app requests full sensor access, a dedicated exclave controls the release of sensor data. It first checks that the activity indicator is on and has been displayed for a sufficient period.
On devices such as the iPhone, where an on-screen dot signals sensor use, another exclave checks which pixels were actually drawn on the display. That check is intended to make the visible indicator independent of what the main operating system claims to have shown.
The exclaves run on a minimal, capability-based microkernel—a small operating-system core that uses explicit permissions to control access to resources. Apple says it has been applying formal verification, mathematical checks of software properties, to this core.
That work uncovered difficult-to-find but critical flaws across multiple kernel subsystems that could have allowed full kernel compromise, Apple said. Many were caught early in development. With the microkernel still changing frequently, Apple says verification remains incremental, extending to different parts over time rather than providing complete coverage of every aspect of the kernel.
