Reference architectures

Industrial IoT architectures without opening control to the internet.

How a plant connects its assets, systems and people. Three topologies we run in production, and how the AI integrates a new sensor.
AssetsPLC · CCTV · GPSSystemsSAP · SCADAPeopleshifts · judgementiGromiproposes + sourceDecidesa person

How it looks today

Every machine wired to every system.

Four devices and four systems already mean sixteen hand-built integrations. Every new sensor adds one more, and without a manual it takes months of trial and error.

  • The same data reaches each system with a different timestamp.
  • Replacing a device means redoing its integrations.
PLC 1PLC 2SensorsCamerasSCADASAPSpreadsheetReports16 hand-built links

01 · Star topology

Unified Namespace (UNS)

Instead of wiring every machine to every system, everything publishes to and reads from a central MQTT broker running on the Edge. Each piece of data has a name and a place: line, machine, variable.

  • Adding a machine or a system does not mean redoing integrations.
  • SAP, the SCADA and the app read the same data, with the same timestamp.
  • Modbus, OPC UA and S7 come in through the same point.
Unified Namespace guide
PLCAssetsSAP · ERPSystemsSCADA · MESSystemsApp iGromiPeopleBroker MQTTUnified Namespace

02 · OT security

Separated zones, read-only

For plants where operations will not accept anything that could write to the control layer. The Edge is installed with two network interfaces: one reads the PLC network read-only, the other sends filtered data to the corporate network, always outbound.

  • No inbound ports are opened toward the control network.
  • Level separation in the style of the Purdue Model (ISA-95).
  • The AI proposes; any action on a machine is approved by a person.
Cybersecurity in OT environments
outbound only · no inbound portsread-onlyiGromi cloud or your own cloudreports · app · AICorporate networkSAP · ERP · emailiGromi Edge (two interfaces)reads read-only · filtersPlant OT networkPLCs · sensors · cameras

03 · Multi-site

Edge per plant, group cloud

For groups with several plants. Each one processes on its Edge and stores locally; only clean aggregates go up to the group private cloud to compare plants, not the raw signal or video.

  • Less bandwidth: the summary goes up, not every reading.
  • If the internet drops, the plant keeps measuring and syncs when it is back.
  • Management sees every plant with the same indicators.
Cloud vs Edge cost
Group private cloudaggregates · benchmarksPlant 1Edge · local bufferPLC · sensors · CCTVPlant 2Edge · local bufferPLC · sensors · CCTVPlant 3Edge · local bufferPLC · sensors · CCTV

04 · Auto-discovery

Plug in a new sensor and the AI recognizes it.

The iGromi Bridge discovers the devices on the network, finds how to talk to them even without a manual, and the AI proposes what each register measures. A person confirms before the data comes in.

Modbus RTUModbus TCPOPC-UAProfinetBACnetCANopenMQTTLoRa
months → weeksHow long it takes to integrate an undocumented device when the register map is found automatically.
A technician's hands attaching a vibration sensor to a motor housing in a plant
Address?Baud rate?Parity?What does each register measure?

How it works, live

From a plugged-in cable to named data, in four steps.

edge-planta · bridgeread-only
$ igromi-bridge discover --read-only
scan Modbus TCP 10.0.12.0/24 ..... 3 devices
scan OPC-UA :4840 ................ 1 server
scan RS-485 port 2 ............... no documentation
try 9600 8N1 addr 1-247 ........ no reply
try 19200 8N1 addr 1-247 ........ no reply
try 9600 8E1 addr 17 ........... replies
read 30001-30008 · 40001-40004 ... 12 registers
@igromi 30001 → temperature 42.3 °C
@igromi 30003 → vibration 2.8 mm/s
@igromi 30005 → humidity 61 %RH
@igromi 40001 → energy 18,420 kWh
wait proposal sent to the app · nothing is saved until confirmed
  1. 01Protocol sweep

    The Bridge walks the network and serial ports and lists the devices that reply.

  2. 02Parameter search

    No manual: it tries speed, parity and address until it talks, and finds the registers without the map.

  3. 03The AI proposes the map

    @igromi proposes which physical variable each register is, and its unit.

  4. 04A person confirms

    You confirm or correct it in the app. Only then does the data come in, named and read-only.

PLANT · LINE 2
New sensor detected
RS-485 · port 2 · 1 min ago
Device at address 17
Modbus RTU · 9600 8E1 · 12 registers
@igromi proposes this map
30001Temperature42.3 °C
30003Vibration2.8 mm/s
30005Humidity61 %RH
40001Energy18,420 kWh
Name: Motor 4 · bearing
ConfirmCorrect
Nothing comes in without a person confirming
HomeTasksChatMore

Everything is read-only: discovery never writes to the PLC or the sensor. Example values.

Comparison

Which one, and when.

Unified Namespace

Best when

Three or more systems need the same data

What it requires

Naming variables once, with a shared convention

Separated zones

Best when

Operations will not accept writes to control

What it requires

An Edge with two network interfaces

Multi-site

Best when

Management compares several plants

What it requires

One Edge per plant and a group private cloud

Where the data lives

Your company decides, depending on the plan.

The same rule in all three architectures: the AI reads, proposes and cites its source; a person decides.

Gratis

iGromi cloud, separated per company

The shift app: chat, photo and voice records, and AI that answers with its source.

Premium

A private, isolated cloud for your company

Adds SAP, ERP and spreadsheets. The AI model runs inside that cloud.

Enterprise

Inside your plant, on Edge or on-premise

Adds PLCs, sensors and cameras. The Edge reads the PLC read-only and keeps measuring offline.

How it looks in the app

The architecture ends in a conversation.

The operator asks in the app and @igromi answers with the PLC value, the SAP order or the shift record, and says where it comes from.

  • Chat by area and shift, with photo and voice records.
  • Answers with the source of each piece of data.
  • Start free, without installing anything in the plant.

Free app in early access. Web available; Android and iOS coming soon.

PLANT · LINE 2
Chat
Maintenance and management
Juan · Operator · 10:12
Conveyor motor 4 vibrating, bearing at 78 °C. I stopped it. Infrared thermometer reading 78 °C on a conveyor motor bearing
Carla · Manager · 10:14
@igromi has this happened before? How was it fixed?
iGromi
Yes, twice. On Jul 14 it was the bearing: Pedro replaced it and realigned the coupling in 40 min.
Source: WO Jul 14 · motor 4 vibration sensor
Carla · Manager · 10:15
Juan, check the bearing like in July.
✓ Work order created · assigned to Juan
Type, talk or mention @igromi
HomeTasksChatMore

FAQ

Frequently asked questions

What is an industrial IoT architecture?
It is how a plant connects its equipment (PLCs, sensors, cameras), its systems (SCADA, MES, ERP) and the people who use them: where each piece of data travels, where it is processed and stored, and who can act on it.
Which one should I start with?
Almost always separated zones on a single line: the Edge reads the PLC read-only and its program does not need to change. The Unified Namespace makes sense once three or more systems need the same data.
Can I start without installing anything in the plant?
Yes. The free app lives in the iGromi cloud, separated per company, and starts with people: shifts, records and decisions. Systems (Premium) and assets with Edge (Enterprise) come later.
How is an undocumented sensor integrated?
The Bridge sweeps the network and serial ports, tries speed, parity and address until it can talk, and reads the registers that reply. The AI proposes which physical variable each one is (temperature, vibration, humidity, energy) and a person confirms or corrects it in the app before the data comes in.
Which protocols does the Bridge speak?
Modbus RTU and TCP, OPC-UA, Profinet, BACnet, CANopen, MQTT and LoRa.
Can the AI write to the PLC?
Not on its own. The Edge reads read-only; if a write is ever defined, the AI proposes it and a person approves it, with name and time.

Every shift without a record is data you lose. Start free.

  1. 1Request early access, free
  2. 2Pick your trade: maintenance, production or safety
  3. 3Your team starts with the chat and its trade helper

No credit card. Your data stays yours.

PLANT · SHIFT B
Tasks
Juan · maintenance
OVERDUE
Silo 1 level
No signal since 05:40
Sensor · supply
TODAY
Motor 4 vibration
4.1 mm/s, above normal
Detected by the sensor
PROPOSED
Check the fans
Shed at 29 °C at 11:20
AcceptDismiss
HomeTasksChatMore