Skip to content
Ordanis
PT

Security & Deployment

Designed to enter the plant without opening the plant.

Ordanis reads data; it does not control machines. The connection leaves the plant, never enters it. And we state clearly what is implemented and what is not yet.

Architecture

Recommended network model: the Edge sits in the industrial DMZ and only talks outward.

  1. 01

    OT · PLC / SCADA

    The equipment's OPC UA server. Read-only.

  2. 02

    Industrial DMZ · Ordanis Edge

    Industrial PC running the Edge software: collection, local buffer, store-and-forward.

  3. 03

    Corporate IT · firewall

    Outbound HTTPS only (443) to a dedicated hostname.

  4. 04

    Ordanis Platform

    API, database and processing, hosted in Brazil (São Paulo).

No inbound port is required on the OT network.

Ordanis Edge

  • 01

    Outbound-only

    The Edge opens every connection; the platform never reaches into the plant network.

  • 02

    Read-only OPC UA

    READ_ONLY machine policy. No code path writes to a PLC or an OPC UA node.

  • 03

    Signed identity

    Each gateway has its own identity and a revocable credential; data arrives signed.

  • 04

    No loss on network drops

    Local buffer and store-and-forward: zero loss and zero duplicates in the tested scenarios.

  • 05

    Versioned configuration

    Draft → validate → approve → deploy → Edge acknowledgement, with rollback.

Data handling

  • 01

    Isolation

    Every organization and site isolated on the server, tested on every API route.

  • 02

    Role-based access

    Permissions per role and per site; whoever acts never approves their own value.

  • 03

    Audit

    Append-only log with author, time, before and after; secrets never reach the log.

  • 04

    Sessions and credentials

    HttpOnly, Secure cookies, CSRF protection, Argon2id passwords, progressive lockout.

  • 05

    Secrets and backup

    Connector credentials encrypted; encrypted daily backup with a daily restore test.

  • 06

    Your data is yours

    Configuration and telemetry export and certified deletion at the end of the contract.

  • 07

    Governed AI

    Read-only tools with the user's permissions; drafts always reviewed by a person.

  • 08

    No trackers on this site

    This site uses no analytics, pixels or third-party scripts.

Deployment models

  • Available

    Cloud

    Platform operated by Ordanis, hosted in Brazil.

  • Available

    Hybrid

    Edge inside the plant + platform in the cloud. This is the pilot model.

  • Future — not offered today

    On-premise

    The whole platform in the customer's data center.

What is and is not certified

We prefer to be clear: we are a young company, and some assurances do not exist yet.

What exists today

  • A formal threat model with threats, mitigations and status
  • Automated tests for isolation, sessions, CSRF, rate limits and Edge identity
  • Component inventory (CycloneDX SBOM) and vulnerability scanning per release
  • Tested security headers and a nonce-based Content-Security-Policy on this site

What we do not have yet

  • No certification: we do not hold ISO/IEC 27001, SOC 2 or IEC 62443
  • No external penetration test yet
  • Validation on a physical PLC is pending (lab)
  • Off-site backup is not enabled yet
  • Privacy policy, terms and DPA are under legal review

Security questionnaire

We answer your company's security questionnaire during pilot discovery, with the architecture and technical documents.

Contact