Security & data

Read-only by design. Reconciled, never rewritten.

Voltframe reads from your systems and never writes back to equipment. Your meter data stays yours, encrypted in transit and at rest.

We ingest interval data and status. No control commands are ever sent to your BMS, inverters or batteries.

TLS 1.2+ in transit, AES-256 at rest. Secrets are isolated per tenant.

SSO/SAML, role-based access and full audit logs on every view and export.

Export anything, delete on request. A signed DPA governs how we handle it.

SOC 2 Type II ISO 27001 (in progress) GDPR / CCPA DPA available Pen-tested annually

Data handling

We hold only what a savings claim needs.

Interval meter readings, equipment status and the utility invoice. No occupant data, no video, no personal information from your buildings.

Interval data pulled over read-only APIs and building protocols.

Stored per tenant, encrypted, access-logged.

Matched to the invoice; raw data retained only as long as your contract requires.

SOC 2 report, DPA and architecture overview are available under NDA.