Capability Statement

ARCA VISION LABS LLC is a software and R&D firm with operational headquarters in Austin, TX, United States. We design and ship local-first software and perform research-and-development engineering for organizations that cannot put sensitive data on a third-party network.

Corporate identification

• Legal name: ARCA VISION LABS LLC
• Operational headquarters: Austin, TX, United States
• Website: https://arca.vision
• SAM.gov UEI: WLNACHHS7CM4
• D-U-N-S: 14-670-3870
• CAGE code: Pending DLA Review / Validation

Procurement identifiers

• SAM.gov UEI: WLNACHHS7CM4
• CAGE: Pending DLA Review / Validation
• Primary NAICS: 541715
• Socio-economic: SDB / Minority-Owned (self-certified)

Socio-economic designations

SBA size and ownership representations are self-certified in SAM.gov as of this posting. This page does not claim 8(a), HUBZone, WOSB, SDVOSB, or other SBA-certified programs.

• Small Business
• Self-Certified Small Disadvantaged Business (SDB)
• Minority-Owned (Hispanic American)

NAICS

• 541715 Research and Development in the Physical, Engineering, and Life Sciences (Primary)
• 541511 Custom Computer Programming Services
• 541512 Computer Systems Design Services
• 513210 Software Publishers
• 541519 Other Computer Related Services

Core competencies

• Specialized software engineering: Native desktop and systems software (Tauri, Svelte, Rust), CLI tooling, and production architecture for environments that require a written trust boundary.
• Edge AI and small-language-model deployment: On-device and perimeter-bound inference. Privacy-first AI architectures that keep regulated inputs off vendor APIs and multi-tenant clouds.
• Air-gapped cryptographic systems: Local-first secrets management with no cloud backend, no telemetry, and no network sockets in the cryptographic core. Commercial product: ARCA Secrets Manager.
• Zero-trust health-tech architecture: HIPAA-ready system design for PHI that must remain in a named custody boundary: local inference, BAAs when PHI is in scope, and no default cloud vault.

Differentiators & technology assets

• Air-gap by construction: ARCA's cryptographic core is built without networking crates. CI enforces the constraint. Remote telemetry and multi-tenant vault breaches are not part of the threat surface.
• Local-first data custody: Customer secrets, model inputs, and vault files remain on customer-controlled media. We do not operate a SaaS vault, identity provider, or telemetry plane for the product.
• No third-party server dependency in the product path: The commercial binary does not require our servers to unlock, search, or inject secrets. There is no vendor outage, license-server kill switch, or cloud subpoena path into the vault.
• Senior architecture leadership: Twenty-plus years of senior software architecture across systems, security-sensitive workflows, and production delivery, applied to R&D engineering, not to a staff-augmentation bench.

Federal compliance & data rights

• FAR / DFARS readiness: We contract under FAR/DFARS terms negotiated in the award. Commercial software is licensed as commercial computer software consistent with FAR 12.212 and DFARS 227.7202.
• SBIR data rights (20-year protection): SBIR/STTR technical data and computer software developed under award are offered with the 20-year protection period established for the SBIR program (FAR 52.227-20; DFARS 252.227-7018, as applicable).
• Commercial computer software: ARCA Secrets Manager is a commercial product. U.S. Government end users acquire only the commercial rights in the standard EULA, not additional government-purpose rights, except as a specific award may provide.
• Phase I / II and subcontract readiness: Registered in SAM.gov. Prepared to perform NSF, DoD, and HHS Phase I/II R&D and to serve as a small-business subcontractor on software, AI, and cryptographic work.

Past performance / project scope

Federal award history is provided in proposals. Public project scope that contracting officers can evaluate today:

• ARCA Secrets Manager (commercial): Free vault. $0 forever. Offline-first, air-gapped cryptographic vault for macOS (Tauri / Svelte / Rust). Pro is $99 once. Argon2id key derivation, XChaCha20-Poly1305 AEAD, native SSH agent, in-memory env injection. No cloud, no telemetry. Product page: /artifacts/arca.
• Advanced services: Privacy-first AI architectures, edge machine learning and small-language-model deployment, zero-trust health-tech (HIPAA-ready) system design, and federal R&D engineering under written SOW.

Point of contact

• Federal Contracting Directorate <antonio@arca.vision>
• General / public: observer@arca.vision
• +1 512 402 2771
• Austin, TX, United States