[esseph]

In an enterprise style deployment you (in theory) would be geographically clustering endpoints, where each entrypoint into the network has a cache of access permissions and resources.

I can't tell if this app supports that without digging through the docs (that don't seem to exist) or the code (that I don't care to browse), but that's how a typical zerotrust deployment works.