Trust & SecuritySecurity your IT and OT teams
Security your IT and OT teams
can sign off on
Where your data goes, how it is protected, what happens when something fails, and whether the numbers can be trusted.
Your data, handled carefully
Stored database-per-tenant with per-tenant authorization, encrypted in transit (TLS 1.2+) and at rest (AES-256), hosted on Microsoft Azure in the region you require: US and Canada today, with Europe, the Gulf, and other Azure regions available on request. Only the tags you choose ever leave the factory, and you can export or delete your data at any time.
Running when your machines are
Releases are promoted to production only once proven stable, the service runs on Microsoft Azure and inherits its resilience, and every incident is recovered fast and reviewed to root cause. Our current operational status and uptime history are available at status.majik.io.
Your uptime never depends on us
MAJiK IoT Connect reads from your PLCs and never writes, so nothing upstream can touch your process. If the link drops, data buffers at the edge and replays in order. Cloud connectivity is optional; air-gapped is a first-class mode.
Numbers you can take to the boardroom
Every value carries units, a timestamp, and a quality flag. Every agent and connection reports its own health, nothing fails silently, and gaps replay from the edge rather than being guessed.
Built to respect your OT network
The agent fits the security model your plant already runs, instead of asking you to loosen it.
- Outbound-only connections: no inbound ports to open
- Reads your PLCs, never writes to them
- Configuration and software updates cryptographically signed and verified at the edge
- No remote shell: remote management is a fixed set of agent commands
- Single sign-on with your identity provider, MFA, and role-based access in the cloud console
- Our own team works under least-privilege access, touching your data only to run the service
In a security review? We will meet you there
This page carries the principles. Your reviewers get the depth: architecture and data-flow detail under NDA, security questionnaires (SIG / CAIQ) answered on request, and direct access to the engineers who built it.
Found a security issue? Email security@majik.io (coordinated disclosure, see security.txt).