Secure from the circuit board
to the platform.
Maintenance and inspection data, asset conditions and sensor values are sensitive. Maintenir protects them at every level: from sensors that can only read, through a private mobile network, to servers in Germany and Europe.
Security at every level
At Maintenir, security is not an add-on module but part of the architecture. From the first reading to the audit report.
From sensor to platform in a protected environment
Readings leave your site via a private Deutsche Telekom mobile network. Your company network is not involved.
From sensor to IoT platform, your readings stay within Deutsche Telekom’s closed network.
What we do to keep your data secure
Servers in Germany & Europe
Maintenir runs in the Telekom Public Cloud, on servers in Germany and Europe. The data centres are ISO 27001 certified and meet the BSI C5 criteria catalogue.
- Data stored in the EU, under European data protection law
- Data centres with ISO 27001 and BSI C5
- GDPR-compliant operation
IoT hardware that can only read
Our IoT gateways are based on our own embedded circuit boards, developed in Germany. Their layout is designed so that they only read signals and values. The hardware has no return channel through which machines could be switched, adjusted or stopped.
- Read-only access through the board layout, not just in software
- Even in an attack, no access to your controls
- Developed in Germany
Telekom M2M SIM with private APN
Sensors and gateways transmit via Deutsche Telekom M2M SIM cards. A private access point (APN) forms a private network, similar to a VPN. The data goes straight to the IoT platform, which also runs in the Telekom environment.
- No route via the public internet
- No connection to your company network needed
- Your IT doesn’t have to open ports or firewalls
Rights and role management
Roles define who sees which sites, assets and data, and what they may edit. External service providers and customers only see the material released to them.
- Roles for administrators, technicians, inspectors and externals
- Rights down to site and material level
- Single sign-on with Microsoft, Apple or Google
Geo-redundant backups
Your data is backed up regularly and stored at geographically separate locations. If a data centre fails, inspection history, records and documents are preserved.
- Backups at several locations
- Protection against a data centre failure
- Inspection records remain permanently available
CVE monitoring
All components in use, from the operating system through PHP and Node.js to individual libraries, are continuously checked against public databases of known vulnerabilities (CVE). When a vulnerability becomes known, we apply the update promptly.
- Continuous monitoring of all dependencies
- Security updates at no effort for you
- Systems always fully patched
AI checks our code, not your data.
We use AI where it increases security and keep it out of where your data lives.
No AI processes
No integrated AI processes run in the production environment where your data is processed. The only exception is an optional AI chat that administrators can switch off at any time.
- No automatic AI analysis of your data
- AI chat optional and can be switched off
- You decide whether AI is used
Continuous AI code review
AI systems continuously check our code base for vulnerabilities and weaknesses. This happens exclusively on the source code, not on production systems and without access to customer data.
- Continuous security analysis of the source code
- Find and fix weaknesses early
- No access to production systems or customer data
Questions from your IT and data protection teams
Where is our data stored?
On servers in Germany and Europe in the Telekom Public Cloud. The data centres are ISO 27001 certified and meet BSI C5.
Can Maintenir control or change our machines?
No. Our IoT boards are designed so that they can only read. The hardware does not provide for write access to controls, not even through a software update or an attack.
Does our sensor data travel over the internet?
No. Readings go via Telekom M2M SIM cards and a private APN, i.e. a private mobile network, directly to the IoT platform in the Telekom environment. Your company network is not needed for this.
Is our data processed by AI?
No integrated AI processes run in the production environment. The only exception is the optional AI chat, which your administrators can switch off.
What happens if a data centre fails?
Your data is backed up geo-redundantly, i.e. at geographically separate locations. Inspection history and records are preserved even if one location fails.
How do you handle vulnerabilities?
We continuously monitor all components in use for known vulnerabilities (CVE) and apply updates promptly. In addition, AI systems constantly check our source code for weaknesses.
Who sees which data?
You decide that through roles and rights. Employees, service providers and customers only see the sites and material released to them.
Questions about security?
We’re happy to answer questions from your IT department and data protection officer directly.
Request Demo
Learn in 30 minutes how Maintenir works for your company.
Alexander Klimitz / Head of Sales
