Security and data protection
Your plant’s data: separate, traceable, and yours.
This page states only what is in Waiotech’s design. Hosting and infrastructure details depend on each customer’s agreement.
- 01
Each plant’s data is separate
Every record belongs to one plant, and that separation is enforced by constraints in the database itself, not only by application code. Records of two plants cannot be linked.
- 02
No hidden access
Waiotech platform staff get no access to plant data through their platform role. There are no hidden support logins and no impersonation of users.
- 03
Access through teams
Access always comes from a team and its access profiles. Changes apply immediately and the affected sessions are revoked.
- 04
Sign-in and passwords
Sign-in is by mobile number and password. Passwords are stored as non-recoverable hashes, and a password reset revokes all sessions.
- 05
A secure field app
The local database on the phone is encrypted (SQLCipher with an Android Keystore-backed key), the phone is bound to one user, offline packages expire and can be revoked, and evidence stays in app-private storage.
- 06
Files and evidence
Uploaded files are integrity-checked and screened before they are accepted.
- 07
A complete history
Actor, time, action, reason and outcome are recorded. Records are corrected, not overwritten; inventory movements are append-only.
- 08
Encrypted connections
All traffic is encrypted with TLS.
- 09
Backup and recovery
The database and files are backed up together as one recovery set, and restore is rehearsed in isolation.
- 10
Your data is yours
Every plant can export its own complete data package: records and accepted files together.
Have a security question? Talk to us.
If your IT or security team has questions, we’ll answer them precisely, and when something depends on the agreement, we’ll say so.