Security & privacy

Your data belongs to you

• Download it any time: one gateway as Excel or CSV, a report as PDF, the alarm history, or everything of your account as one ZIP file (owners).
• You decide how long it is kept: forever, unless your owners choose a shorter period.
• When you leave, you get all your data as files, and then it is deleted, with a check that nothing is left. Backup copies are overwritten within [30] days.

Other customers cannot see your data

• The database itself checks every request: who is signed in, which customer they belong to and which locations they may see. The web application cannot read any table directly.
• An automated test (about 300 checks) attacks the system as one customer against another after every change to these rules, and fails if any part is not covered.
• Inside your account, owners decide who may see what: viewers only read, engineers change settings, and users can be limited to some locations.

BAS staff cannot see your data

• BAS sees your account, plan, usage figures and billing details: what it needs to run and bill the service. It does not see your gateways, readings, alarms, locations or users.
• If you want BAS to help, an owner allows support access for a chosen time (4 hours to 30 days) and can end it at any moment. Every page BAS staff open is listed for your owners, and they get an e-mail when access is allowed and when BAS staff open your data.
• A small number of named BAS engineers run the servers and could technically reach the database for maintenance, as with any hosted service. This access is limited, recorded by the hosting provider, and not used to look at your data unless you ask for support or the law requires it.

Signing in

• Anyone can create an account for their company. It exists only after the person enters the 6-digit code sent to their e-mail address (valid 15 minutes, 5 tries); they become its owner.
• Two-step sign-in with an authenticator app is open to everyone and recommended, above all for owners: each person switches it on or off on their Account page (switching off needs the password and a code). Owners see on their Users page who has it on.
• A new password needs at least 10 characters with a capital letter, a number and a special character. Passwords are stored only as one-way hashes (bcrypt); nobody, not even BAS, can read them.
• Repeated wrong passwords or codes are blocked, per e-mail address and per network address. Sessions end after 7 days without use; a password reset link works once, for 30 minutes.
• Your Account page lists where you are signed in (browser, network address, when) and signs you out anywhere else with one click.
• Display links for TVs: an owner can make a link that shows one screen, read-only, without signing in. Anyone who has the link sees that screen until the link expires or an owner cancels it; it opens nothing else.

Machines and connections

• Everything travels encrypted: the web pages over HTTPS, the gateways over MQTT with TLS.
• Gateways only connect outward to the cloud; nothing connects into your plant. Each gateway has its own account and can only send its own readings.
• BAS EDGE only reads from your PLCs. It never writes to them and cannot control your machines.
• Alarms are for information. BAS EDGE is not a safety system: never rely on it to stop a machine or protect people.

Where your data is stored

• On a server of Amazon Web Services in Sydney, Australia (region ap-southeast-2), on an encrypted disk. [Planned: Mumbai, India.]
• Backups: daily, encrypted, in the same region: a copy of the database kept for 30 days, and a snapshot of the whole disk kept for 7 days.
• Alarm SMS (only to the mobile numbers your owners enter as alarm recipients) are sent through Amazon SNS (Amazon Web Services) and the phone networks; the SMS text holds the alarm, location and gateway name.
• Alarm notifications on phones (only for people who turn them on for their device) travel through the push service of that phone's browser (Google, Apple, Mozilla or Microsoft), encrypted so that only the device can read them.

Personal data (India's DPDP Act)

BAS EDGE holds little personal data: the names and e-mail addresses of the people who use an account, their role, when they last signed in, the browser and network address of their sessions, the devices they turned alarm notifications on for (browser name and push address), the mobile numbers owners enter for alarm SMS, network addresses of failed sign-ins (to stop password guessing), and the billing contact your owners enter. It is used only to run and bill the service. You can see and correct it in the app, and ask for it to be deleted. Issued invoices (with the billing details on them) are tax records: they are kept as long as Indian tax law requires, also after an account is deleted.

Deleted automatically every night: failed sign-ins after 30 days; sessions after 7 days without use (30 days at most); unused password links when they expire; requests to create an account that were not completed (name, company, e-mail and network address) after 2 days; records of BAS staff visits after 400 days; sent account e-mails, webhook calls and phone notifications after 30 days; alarm e-mail and SMS records after 90 days. A device whose push service says it no longer exists is removed at once.

Questions or complaints about personal data: [grievance officer, name and e-mail].

Security reviews and reporting a problem

BAS reviews the security of BAS EDGE itself and keeps its software up to date; [an independent security review is made before launch and every year].

Found a security problem? Please write to info@basedge.in and do not share it publicly until it is fixed. If BAS learns of a breach that affects your data, it tells your owners [within 72 hours] and the authorities as the law requires.