Remote kill switch Can someone other than you switch your device off?
Short answer. A remote kill switch is a mechanism that lets someone other than the person holding a device disable it, or its software, over a network. There are two kinds. An owner-held switch, such as the remote lock and wipe that NIST describes for lost mobile devices, is a security feature. A vendor-held one is a dependency: if a device needs the vendor’s servers to keep working, a lapsed payment, a policy change or the vendor’s closure can stop it. In 2016 Nest announced that the US$300 Revolv smart-home hub it owned would stop working entirely from 15 May. When buying an AI appliance, ask in writing who can disable it, how, and what happens if the vendor disappears.
01
Two kinds of switch
Held by
Purpose
Example
The catch
The owner or an administrator
Protect data on a lost or stolen device
Remote lock and remote wipe in mobile device management (NIST SP 800-124 Rev. 2)
NIST calls remote wipe fundamentally unreliable on its own: an attacker can power the device off before the signal arrives
The vendor
Enforce licences, respond to abuse, end a product
A licence check that locks the product, or a service shutdown such as Revolv’s
You depend on the vendor’s decisions, solvency and servers
Anyone who reaches the vendor’s control channel
None: this is misuse
Stolen vendor credentials used to send a command
Any remote control channel is also something an attacker wants to reach
02
How a device can be switched off from afar
A licence check that fails closed: the product refuses to run if it cannot confirm the licence. See offline licence.
A remote management agent that can receive commands such as lock or wipe.
A cloud dependency: the app or hub needs the vendor’s servers to work at all. The Verge reported of the Revolv hub that the app would not open and the hub would not work after 15 May 2016.
A signed update that removes or limits features.
A subscription that lapses, with features disabled on a date.
A feature retired by the vendor. OpenAI’s guidance says custom GPTs stop working at retirement and leave the GPT directory, as of October 2026.
03
Questions to put to the vendor, in writing
Can you, or anyone else, disable, lock or throttle my device or software remotely? On what grounds: non-payment, licence expiry, breach of terms, security?
What does the product do if it cannot reach your servers for a week, a month, a year?
Does it check a licence at start-up, and what happens when the check fails?
Is there a remote management channel? Can I switch it off? Who can use it, and is every use logged where I can see it?
If the company closes, is my right to use the delivered software perpetual? What happens to updates, support and licence files?
Can updates be applied offline, and are they signed so I can verify them?
Will you put the answers in the contract?
04
What a reasonable answer looks like
NIST’s advice on mobile devices is that remote wipe should be one layer in a multi-layered approach and not the sole control. The same attitude suits vendor-held switches. A vendor may have good reasons to revoke a stolen unit or to end an abusive account. What an office can reasonably ask for is written conditions, notice before action, a documented fallback when servers are unreachable, and the right to keep running the version it has bought.
05
Where ANVE stands
ANVE’s security page (/security) states that if ANVEAI shuts down the box keeps working, that every order includes a perpetual licence for the software delivered with the unit, and that there is no remote kill switch. It also says ANVE does not update itself over the internet: ANVEAI installs updates on site today, and signed update packages applied offline by USB are not on ANVE yet. The sealed unit, in design, adds two physical switches with lights, one that cuts the network and one that cuts the microphones: controls that sit on the device in the office. ANVE is pre-release, so ask for these positions in the contract, as you would from any vendor. A demo call is free.
06
Questions people ask
Do cloud AI services have a kill switch?
In effect, yes: a cloud service runs on the provider’s servers, so the provider can suspend or end it. Plan for that. Our question page on what happens if the AI vendor shuts down covers it.
Is a kill switch ever a good thing?
Yes, when the owner holds it. Remote lock and wipe protect data on a lost phone or laptop. NIST adds that it should be one layer among several.
Can a licence expiry stop an on-premise AI?
It can, depending on how the licence is built. A product whose licence check fails closed stops when the licence lapses or cannot be confirmed. See the offline licence page.
How is a kill switch different from remote wipe?
A remote wipe erases data. A kill switch stops function. Both are remote commands, so the key question is who holds them.
Does ANVE have a remote kill switch?
ANVE’s published security page says there is no remote kill switch, that every order includes a perpetual licence for the software delivered with the unit, and that the box keeps working if ANVEAI shuts down. ANVE is pre-release, so ask for these in the contract.
07
What is not real yet
No sealed ANVE unit exists; every image of the appliance on this site is a labelled render. The software runs today on a development machine. No customers yet, no certifications, no delivery date, and the final price is not announced.
Reservations are ₹999 in India or US$12 elsewhere, refundable in full until you confirm an order in writing (terms). Offices that cannot use cloud AI can apply to be one of ten design partners.
