Your data doesn't leave your plant.
Unless you order it to.
Designed for hostile environments and paranoid auditors. iGromi OS implements a Zero-Trust architecture from the sensor to the cloud.
OT Network (Plant)
PLCs, Sensors, Local SCADA.
NO INTERNET ACCESS
Cloud / IT
Remote Dashboard, ERP, Alerts.
ENCRYPTED DATA ONLY
Network Invisibility (Stealth Mode)
iGromi OS does not open inbound ports. All traffic is outbound. This means your plant is invisible to scanners like Shodan or attack bots. You cannot attack what you cannot see.
WireGuard® Tunnels
We use WireGuard, the most modern and lightweight VPN protocol, to establish point-to-point encrypted tunnels. It works even behind 4G cellular networks with strict CGNAT, without needing fixed public IPs.
Data Sovereignty (Local-First)
Your historical data is stored first on the Edge device's SSD (configurable Retention Policy). If you decide to cut the internet, the system keeps operating and storing data locally for years.
Container Isolation
Each application (Node-RED, Database, AI) runs in its own isolated Docker container. If a process fails or is compromised, it does not affect the rest of the OS or the control network.
What risk teams check before approving a vendor
Industrial cybersecurity
TLS 1.2 encrypted communications, the gateway only opens outbound connections (no inbound ports on your firewall) and WireGuard tunnels for remote access. OT/IT segmentation following the Purdue model.
Personal data on the plant floor
Cameras and fingerprint clocks process biometric data. Processing happens at the plant, data does not leave and every access is audited. In force: December 2026.
99.9% monthly availability
Availability guarantee for dashboards and APIs on the SaaS plan. On-premise installations do not depend on the internet or on our cloud.
Need to validate this with your IT/Cybersecurity team?
Download our technical security architecture whitepaper to present to your CISO.
Read Security Whitepaper