Home/Security
Security

Handling sensor and equipment data responsibly.

What is stored, how it moves, and who can see it - stated as it is today, without overclaiming.

What is stored

Misamtek stores the sensor readings you connect, at the sampling rates you provide, plus metadata about each machine (asset tag, sensor type, learned envelope parameters). No production-line video, no operator PII, no ERP data unless you explicitly integrate one.

Retention

Native-resolution retention is 30 days on Starter, 1 year on Growth and configurable on Enterprise. Downsampled rollups are retained for the life of the account for trend analysis. You can request a full export at any time and account deletion removes all associated readings.

Encryption

All sensor data is encrypted in transit over TLS 1.2 or higher, from the edge gateway or ingest endpoint all the way to storage. Data at rest is encrypted with AES-256. Encryption keys are managed by the platform and rotated on a scheduled cadence.

Access

Access to sensor data is scoped to the tenant that owns it. Fleet-level learning uses signatures and extracted features, not raw readings that would allow one customer's data to be inferred from another customer's account. Internal engineering access is limited and audited.

Authentication

Email and password authentication is available on all tiers, with second-factor sign-in. SSO via SAML and OIDC is available on Enterprise. Role-based access on the customer account is standard on Growth and Enterprise.

Deployment posture

The cloud service runs in a hardened production environment. An on-prem edge gateway is available for customers that require sensor data to remain inside the plant network - the engine runs on the edge in that mode and only diagnostic summaries transit to the cloud.

Compliance posture, stated honestly

Misamtek is a new company and the platform is under active development. We follow security practices that align with industry frameworks (data minimisation, encryption in transit and at rest, principle of least privilege, tenant isolation) and we do not currently claim any third-party certification we have not completed. Where we are pursuing an audit, that is stated explicitly during contracting.

Reporting an issue

Please write to us via the contact page. Security-related messages are routed with priority.

SECURITY AT A GLANCE ACTIVE
TLS 1.2+ in transitYes
AES-256 at restYes
Tenant isolationEnforced
MFAAvailable
SSO SAML / OIDCEnterprise
RBACGrowth+
On-prem edgeEnterprise
Data exportAny time
Try the mechanic

Pick an equipment type. Watch its sensor pulse move.

This is not a mockup. The waveforms below are being generated the same way we score real streams - learned envelope, drift detection, diagnosed callout. Pick a machine and watch an anomaly emerge.

LIVE :: MTR-07 :: 00:00:00
1m15m1h24h
TEMPERATURE---
VIBRATION---
PRESSURE---
POWER DRAW---
SAMPLING200 Hz
UPTIME14d 06h
All streams nominal
Within learned envelope
Machine
MTR-07
Reading
Vibration spike outside learned envelope
Suggested cause
Consistent with early bearing wear
Recommendation
Recommended inspection within 48 hours