Sensors & devices
Field sensors, PLCs, gateways, cameras and edge inputs.
Platform Security + Connectivity + Deployment Control
Security and network architecture for monitored environments.
Nvirosense combines isolated customer deployments, field connectivity, edge processing, layered security and auditable data flows into a platform architecture that can support regulated and operational environments.
Network paths
LoRaWAN, GSM/LTE, wired OT protocols and hybrid sync patterns.
Platform controls
RBAC, audit trails, backups, retention and notification routing.
Operational evidence
Dashboards, alarms, reports and compliance-ready records.
Architecture flow
Capture
Secure transport
Edge / platform processing
Audit-ready output
Deployment & isolation
Each customer environment can run with its own isolated platform boundary.
Nvirosense can be deployed in cloud, customer cloud, on-premise, head-office or hybrid edge models. Public-facing copy remains simple: each customer environment can keep its own application boundary, data store, storage context and internal hierarchy.
Isolated server
Separate application and data boundary per customer deployment.
Flexible hierarchy
Support structures such as company, branch, department or farm, block and field.
Deployment choice
Cloud, on-premise and edge-first options can be selected to suit the site.
Isolation model
Customer A
Isolated deploymentApplication
Database
Storage
Customer B
Isolated deploymentApplication
Database
Storage
Customer C
Isolated deploymentApplication
Database
Storage
Connectivity models
Use the right network layer for the site, the data rate and the resilience requirement.
The platform can work across low-power field telemetry, public and private LoRaWAN, GSM/LTE, Wi-Fi, Wi-Fi HaLow, wired industrial protocols and hybrid edge sync patterns. The goal is not one preferred transport. The goal is controlled, supportable data flow.
LoRaWAN
Private or public LPWAN for low-power telemetry, with managed-gateway options where uptime and local retention matter.
GSM / LTE / wireless
Use drop-in remote sensing, wider-area links or higher-bandwidth wireless where gateway coverage is not practical.
Hybrid edge
Offline-first edge systems can keep logging locally, process data or AI events near site, then sync when connectivity returns.
Wired OT protocols
Support Siemens S7, Modbus RTU/TCP, BACnet, SDI-12, SNMP, serial and control outputs without exposing OT systems directly to the public internet.
Defence in depth
Independent layers reduce reliance on any single control point.
Public-facing platform security is best described as layered engineering: device identity, network protection, gateway supervision, isolated server instances, application controls and operational oversight.
Device
Unique identity, keys and secure commissioning for field-connected devices and gateways.
Network
AES-128, MQTT/TLS, HTTPS/SSL, VLAN segmentation and firewall policy where appropriate.
Gateway / edge
Supervised access, tunnel-only support paths and local outputs only where configured and approved.
Server
Isolated instance boundaries, role-based access, audit visibility, backups and retention control.
Application / compliance
Electronic records, alarms, routing, review steps, notification audit history and approval workflows where required.
Operations
NOC supervision, heartbeat monitoring, escalation patterns and operational visibility over managed infrastructure.
Outbound-only support path
Customer server / gateway / edge
No inbound public ports exposed.
Zero Trust / tunnel
Controlled outbound path for approved support access.
Nvirosense NOC
Monitoring, updates and supervised support visibility.
Customer environment
Outbound tunnel
Approved NOC access
NOC & secure remote access
Remote support can stay outbound-only, controlled and auditable.
The reference architecture supports outbound-only remote connectivity through controlled tunnel and Zero Trust patterns, avoiding the need to open inbound public ports directly onto customer servers, gateways or edge systems.
No open inbound ports
Customer infrastructure does not need direct public exposure for routine support access.
Approved staff only
Support, monitoring and update access stays policy-controlled and limited to authorised personnel.
Managed gateway visibility
Heartbeat, uptime, packet status and support context can be supervised where managed gateways are used.
Field resilience
Local buffering and store-and-forward patterns can retain events during outages and forward them when links recover.
From telemetry to evidence
A monitored event can move from field reading to regulated evidence.
The platform story does not stop at transport. Sensor and equipment data can be validated, securely moved, buffered, ingested, routed through alarms and notifications, surfaced in dashboards, compiled into report packs and captured in audit trails or compliance workflows.
-
1. Capture
Sensor reading, device state or field event is recorded.
-
2. Validate & transport
Data is checked, secured and moved through the selected network path.
-
3. Buffer & ingest
Edge or gateway buffering protects continuity before platform ingestion.
-
4. Alarm & operate
Rules, notification routing and permission-controlled outputs support response workflows.
-
5. Report & audit
Dashboards, reports, AutoQMS-style packs and audit trails preserve evidence.
Engineering principles
Secure by layer, protocol-agnostic and ready for cloud, on-premise or edge deployment.
Nvirosense connects the physical world to compliance-ready digital evidence through isolated customer deployments, controlled network design, offline-first resilience and operational supervision.