Data Security
Edge Devices/ VistaZ
Data Storage
Data is stored in a proprietary format and is encoded to ensure that the data is never available in plain-text format. Only Coolr Personnel can decipher the data even if accessed in raw format.
Limited Data Storage
Devices themselves do not store any information except the sensor data. Hence, even if data is accessed directly from the devices (via gateways), the information is related to data point and no information is available related to the install location, client etc.
Data Transmission
Authenticated
- Each device has its own password to ensure unauthorized personnel cannot access the data. The credentials for the user can be disabled remotely.
- Similarly, the device password can also be changed remotely with proper authorization.
Anonymous
- For ease of use, anonymous data collection may be allowed. If anonymous data collection is allowed, data is still encoded and is not associated with the location.
- Even if data is accessed, there is no association with the specific location and apart from sensor data, no other information is available.
Gateways - OS based (Global Hub)
Data Storage
Data on the Gateways is stored in the application specific folder with restricted access. Each device is authorized and managed via the Coolr Portal and can be deactivated if considered compromised. Data is removed as soon as it has been uploaded to the cloud.
Limited Data Storage
Coolr Gateways do not store decrypted/ deciphered data.
Data Transmission
Authenticated
Each gateway must be used by an authentication user. Role based security restricts the functionality for the gateways. By default, users can only download the data from allowed edge devices and upload to the Coolr Group portal.
Anonymous
In this case, the gateway can collect the data from any of the devices belonging to the same client and does not require a specific login/ password credential.
Data Access
- To view the application data, user must be specifically authorized. Based on roles, users may also be restricted to collect data from different/ more locations while they can view data of limited locations or not at all.
- Any location specific/ historical information requires active internet connectivity to ensure that the user is authorized to access specific data.
Portal
Data Storage
- Data in the cloud is protected by multiple layers of security.
- Firewall rules limit database servers to only be reachable by the application server.
Data Transmission
Authenticated
All these access to cloud portal is always authenticated by a strong username and password.
Encryption
All the data transmission happens over SSL.
Data Access
To view the application data, user must be specifically authorized. Based on roles, users may also be restricted to access partial data for partial locations.
Security Audits
Coolr Group uses 3rd party services for period security audits to make sure we are protected against latest vulnerabilities.