Security
Security at every layer.
From the device on your site to the record in the cloud, each layer is secured on its own, and our controls are monitored continuously as we complete SOC 2.
Compliance
SOC 2, with controls monitored continuously.
Our SOC 2 controls are in place and monitored continuously. The audit's observation period runs from October to December 2026, and the report is expected in January 2027.
- Controls in placeMonitored continuously
- Observation periodOctober to December 2026
- ReportExpected January 2027
Follow one reading
One reading, protected at every step.
A sensor in a cold room sends a temperature. This is what protects it from the device to your people.
- 01On the device
The device signs in as itself.
Each device connects with its own credentials, never a shared password, and it can publish and subscribe only on its own topics. One device cannot read another's data.
- 02In transit
The reading travels encrypted.
Devices connect to the platform over TLS, and the web app and APIs are served over HTTPS.
- 03In the platform
It is kept apart from every other customer's.
Each customer's data is separated from every other customer's. On the Enterprise plan, you also get your own message broker, and your data in its own database or tables.
- 04In storage
It is stored in the United States and backed up daily.
The platform is hosted on Microsoft Azure in the United States, in the East US 2 region. Some supporting services run elsewhere, and we list them on request. Production databases are backed up daily. On the Enterprise plan, ask us about hosting your data in your region.
- 05To your people
It reaches the people you chose, and you can see that it did.
An alert goes to the people on your escalation chain. SMS, email, push and Teams each come back with a delivery receipt.
The delivery log is sample data.Incident #4862 · sent3:12 AMTime Channel To Status SMS Ravi (on call) Delivered Push Ravi Delivered Email Maintenance team 1 retry Teams Arlington plant Posted - 06Yours
It is yours to take.
We export your data on request. Our policies say what we collect and how we use it.
When it acts on equipment
It acts on equipment only where you switch that on.
You can start monitor-only: sensors and alerts, nothing wired into your equipment.
- 01
Off until you switch it on
Start monitor-only, and switch on control when your team is ready, room by room or line by line.
- 02
Within the limits you set
You set the limits for each room, zone or line. Control acts only within them.
- 03
Every command is logged
OneIoT keeps what it asked for and what the equipment last reported, so a command is confirmed, not assumed.
- 04
On site, when the internet is gone
Where a site runs OneIoT Edge, control runs on the edge and keeps deciding when the internet is gone. The edge runs a dedicated OS built for security, with secure onboarding and updates.
Your review
Send us your security questionnaire.
Send it to [email protected]. We answer it for your security team's review.