Technical specifications
Datasheet v1.0
Sales-engineer-ready specification of the v1.0 reference platform. Production v2.0 PCB inherits every line item below with dual-source qualification on critical ICs.
01 · Form factor & mass
Length65 mm (target v2.0)
Width35 mm
Thickness12 mm
Mass38 g target
EnclosureAnodized aluminum 6061 + polycarbonate window (v2.0); CNC Delrin for v1.0 prototype
Display1.9″ IPS color, 320 × 170, 500 cd/m²
Indicators8× WS2812B RGB ring, vibration motor, MA40S4S ultrasonic transducer
InputsRotary encoder + push button, dedicated SHIELD button, USER_KEY (deepsleep wake)
ConnectorUSB-C (charge + serial + JTAG)
BatteryLi-Po 3.7 V · 1300 mAh · UN38.3 / IEC 62133 certified cell
Battery life12-18 h continuous scanning · 24+ h with display off · 30 days deep sleep
Operating temp-10 °C to +50 °C (consumer) · -30 °C to +70 °C (SPYNO/D)
Water ratingIP54 (target)
Drop survival1.0 m onto concrete (case fitted)
02 · Compute & radios
MCUEspressif ESP32-S3FN16R8V — dual LX7 @ 240 MHz · BLE 5 · Wi-Fi 802.11 b/g/n · AI/SIMD
Memory16 MB QSPI flash · 8 MB OPI octal PSRAM
Sub-GHzTI CC1101 · 300-348 / 387-464 / 779-928 MHz · -110 dBm sensitivity
2.4 GHzESP32-S3 native (BLE 5 with extended advertising + 2M PHY)
NFCNXP PN532 · 13.56 MHz · ISO 14443 A/B · FeliCa · target + initiator modes
AudioEverest ES7210 codec + PDM mic · NSiWay NS4168 1 W class-D speaker amp · 16 kHz capture @ 1024-pt FFT
Power managementTI BQ25896 charger (1 A) + BQ27220 fuel gauge (±1 % accuracy)
03 · Detection capabilities
BLE-class trackersApple AirTag · Tile · Samsung SmartTag · Chipolo · Pebblebee · 1-3 s detection · -75 dBm threshold · 12 m LOS range
Behavioral persistenceUnknown beacon held above -75 dBm for ≥ 90 s flagged as following
Sub-GHz RF bugs433 / 868 MHz analog audio bugs · 10 s persistence threshold · -70 dBm
NFC field detectionExternal 13.56 MHz field within 3-5 cm · instant alert
Wi-Fi camerasHikvision · Dahua · Tapo · Wyze · Reolink · Eufy · Wansview · Foscam · Amcrest (OUI DB + SSID heuristics)
Wi-Fi probe attackerPromiscuous-mode detection of beacon-spam rogue APs · 1.5 s slot per scan window
Acoustic FFT217 Hz GSM frame buzz · 50/60 Hz PSU coil-whine · unexpected ultrasonic emissions · 1024-pt FFT @ 16 kHz · 5 s analysis window
04 · Active countermeasures (Shield Mode)
Subscription-gated. Each session validates an Ed25519 JWT issued by
the SPYNO cloud. Implementation in firmware/src/jwt.cpp.
#1 Ultrasonic22 kHz piezo emission with 5-frequency hop (21.5 / 22.0 / 22.5 / 23.0 / 23.5 kHz) every 250 ms · acoustic — outside FCC jurisdiction
#2 BLE floodNimBLE connect/abort loop targeting only the MAC classified as a tracker · 5 cycles/sec · §15.247-compliant management frames
#3 Wi-Fi deauthRaw 802.11 deauth frame addressed to discovered camera MAC + router BSSID · channel-locked · MAC-targeted, not broadband
#4 NFC card spoofPN532 in target mode emitting randomized junk NDEF when external reader probes us · purely reactive, no emission in absence of probe
Default duration5 minutes · configurable up to 30 minutes
Auto-armEnabled in Meeting and Hotel scenario profiles
Forensic recordEncrypted AES-256-GCM record of every event · retrievable via mobile app
05 · Mobile & cloud
iOSNative Swift · ≥ iOS 16 · CoreBluetooth · CryptoKit · SwiftData · SwiftUI
AndroidNative Kotlin · ≥ Android 11 · Nordic BLE library · Room · Tink · Jetpack Compose
BLE GATT API5 characteristics (Status · Threats · Config · Command · Log) · JSON-over-GATT · custom 128-bit UUIDs
PairingNimBLE LESC (BLE 5.0 Secure Connections, ECDH P-256) · 6-digit numeric comparison on TFT
CloudCloudflare Workers + D1 · edge-first JWT issuance · sub-30 ms verification globally
OTASigned firmware via Cloudflare Workers + R2 · Ed25519 verification on device · dual-slot atomic update
06 · Compliance posture
FCC Part 15.247Compliant — BLE 5 + Wi-Fi off-the-shelf · CC1101 on permitted ISM bands
FCC §15.209Field-strength limits verified by ATL test plan
FCC §15.231CC1101 RX-only by default; TX only during Shield Mode against pre-classified threats
Section 333 Communications ActNot implicated — Shield Mode does not interfere with licensed services; ISM bands are unlicensed
EU 2014/53/EU (RED)EN 300 328 + EN 300 220 + EN 301 489 harmonized standards
EU 2014/30/EU (EMC)Compliant per EN 301 489-1, -3, -17
EU 2011/65/EU (RoHS)Compliant per BOM declarations
EU REACH SVHC< 0.1 % w/w SVHC; SCIP database notification on EU sale
EU 2012/19/EU (WEEE)WEEE-marked packaging · take-back program
UN38.3 / IEC 62133Cell + pack certified
SAR / ICNIRP 2020Within low-power exemption (TX power ≤ 13 dBm BLE/Wi-Fi · ≤ 10 dBm sub-GHz)
07 · Bill of materials (production v2.0 estimate, 5K MOQ)
MCU + memory$5.40
Sub-GHz (CC1101 + matching + filter + antenna)$4.20
NFC (PN532 + RX/TX antenna)$3.90
Display (1.9″ ST7789V + driver)$6.80
Audio (ES7210 + PDM mic + NS4168 + speaker)$3.10
Indicators (WS2812 + vibro + piezo + MOSFETs)$2.10
Power (BQ25896 + BQ27220 + Li-Po + USB-C)$7.20
PCB + SMT (4-layer, qty 5K)$4.40
Enclosure (CNC anodized 6061 + PC window)$11.50
Packaging$2.10
BOM total$50.70
Want the full data room?
27 additional volumes — security whitepaper, manufacturing plan, financial memorandum, USPTO claim chart, and the rest of the v3.0 master pack — are available under signed NDA.
Request Operator Brief