In our cloud under your contracted policy, or exclusively inside your network with Enterprise.
Enterprise Offline runs with no internet connection and no external access of any kind.
Edge configuration exports carry a checksum for integrity checks. Signed release packages are planned, not yet delivered.
On Enterprise, we only connect when you open an Assisted Support session, and only for that intervention.
Connectors observe your systems. They don't send commands to devices or change their settings.
Encrypted transport (TLS and mTLS) wherever the source supports it. Source credentials are stored as secret references, never in plain configuration.
| MODE | ENGINE RUNS IN | INTERNET | UPDATES | ALLFLOW ACCESS | READINGS LIVE IN |
|---|---|---|---|---|---|
| Cloud | Our infrastructure | Yes | Automatic, by us | We operate the service | Delivered to you, per contract |
| Cloud + Edge | Our infrastructure, with Edge on your site | From Edge, to authorised destinations only | Automatic, by us | Edge configuration and the data you authorise | Your internal systems, Cloud, or both |
| Enterprise · Offline | Your infrastructure | None | Packages installed by you | None | Your network |
| Enterprise · Connected | Your infrastructure | Outbound, for approved updates only | Approved by you | None | Your network |
| + Assisted Support | Your infrastructure | Temporary session, opened by you | As agreed for the intervention | Time-limited, controlled by you | Your network |
Request our security pack, or set up a session with our engineers to review the architecture against your policy.
In our cloud under your contracted policy, or exclusively inside your network with Enterprise.
Enterprise Offline runs with no internet connection and no external access of any kind.
Edge configuration exports carry a checksum for integrity checks. Signed release packages are planned, not yet delivered.
On Enterprise, we only connect when you open an Assisted Support session, and only for that intervention.
Connectors observe your systems. They don't send commands to devices or change their settings.
Encrypted transport (TLS and mTLS) wherever the source supports it. Source credentials are stored as secret references, never in plain configuration.
| MODE | ENGINE RUNS IN | INTERNET | UPDATES | ALLFLOW ACCESS | READINGS LIVE IN |
|---|---|---|---|---|---|
| Cloud | Our infrastructure | Yes | Automatic, by us | We operate the service | Delivered to you, per contract |
| Cloud + Edge | Our infrastructure, with Edge on your site | From Edge, to authorised destinations only | Automatic, by us | Edge configuration and the data you authorise | Your internal systems, Cloud, or both |
| Enterprise · Offline | Your infrastructure | None | Packages installed by you | None | Your network |
| Enterprise · Connected | Your infrastructure | Outbound, for approved updates only | Approved by you | None | Your network |
| + Assisted Support | Your infrastructure | Temporary session, opened by you | As agreed for the intervention | Time-limited, controlled by you | Your network |
Request our security pack, or set up a session with our engineers to review the architecture against your policy.