Enterprise Trust Centre

Industrial intelligence, built around controlled data.

Dataviss is designed for operating environments where architecture, access, traceability and human accountability matter. This centre explains our current enterprise approach and the controls defined with each customer.

Trust principle

Connect only what is approved. Preserve the source. Show the evidence. Keep people in control.

Exact controls, responsibilities, service levels and data-handling terms are defined in the applicable agreement and implementation architecture.

Architecture

A layered industrial architecture that connects existing systems, contextualises operational data and keeps source systems authoritative.

Security

Least-privilege access, encrypted transport, network boundaries and traceable system activity configured for the operating environment.

Deployment

Cloud, on-premise, edge and hybrid patterns support enterprise, mid-market and MSME manufacturing requirements.

Data governance

Purpose limitation, data minimisation, defined retention and human validation help keep industrial intelligence governed.

Reference architecture

From industrial signal to governed decision context.

The architecture separates source systems, data enablement, operational applications and the AI Analyst layer so each boundary can be reviewed and governed.

No assumed write-back to plant controls
01

Systems of record

ERP · MES · SCADA · Historian · QMS · BMS · Databases

Customer operational systems remain authoritative. Dataviss connects to approved sources without requiring a rip-and-replace programme.

02

Industrial data enablement

EdgeVISS · OT/IT bridge · Context · Verification

EdgeVISS acquires and contextualises permitted machine and system data. Implementations can align naming and asset context to Unified Namespace and ISA-95 patterns.

03

Operational applications

Qualitiviss · FaciliVISS · DatVision AI

Specialist applications capture, monitor and govern quality, facility, utility and visual-inspection workflows.

04

AI analyst layer

IQVISS · QAI · Facility Analyst · Vision Analyst

AI Analysts relate approved evidence, surface exceptions and prepare decision context. Responsible personnel validate findings and retain final authority.

Deployment choice

Place workloads where the operation requires them.

Deployment is selected through solution design—not assumed. Data residency, latency, integration, support and recovery requirements determine the final pattern.

Cloud

Rapid rollout and multi-site access

Approved data is processed in the contracted cloud environment.

On-premise

Plant-controlled infrastructure

Workloads and data can remain within the customer-managed environment.

Edge

Low-latency OT and vision workloads

Processing is placed close to equipment, cameras or the industrial network.

Hybrid

Controlled OT-to-enterprise intelligence

Local collection or processing is combined with approved central services.

Security controls

Controls matched to the deployment boundary.

Industrial security is a shared system property. Product controls, customer infrastructure and implementation choices are reviewed together.

C-01

Identity and access

Authorised users and service identities can be scoped through role-based access and separation of responsibilities appropriate to the deployment.

C-02

OT/IT boundaries

Connectivity is designed around approved endpoints, network segmentation and controlled data flows. Direct control actions are not assumed as part of an analytics deployment.

C-03

Encryption and secrets

Supported production architectures use encrypted transport where applicable. Credentials and integration secrets are handled through deployment-appropriate secret controls.

C-04

Logging and traceability

System events, workflow activity and analytical findings can be retained to support investigation, troubleshooting and operational accountability.

C-05

Change and vulnerability management

Production changes are validated through the applicable delivery workflow. Reported vulnerabilities are triaged according to scope, severity and customer impact.

C-06

Resilience and recovery

Backup, recovery, availability and restoration objectives are defined for the selected product, architecture and customer agreement.

Data governance lifecycle

Govern data from purpose to decision.

Governance begins before connection and continues through context, access, retention and human validation.

01

Purpose

Define the operational decision and authorised use case before connecting data.

02

Minimise

Connect only the sources, fields, time ranges and identities required for that purpose.

03

Contextualise

Relate signals to assets, processes and operational hierarchy while preserving source references.

04

Control

Apply access, retention, export and deletion rules agreed for the deployment.

05

Validate

Present evidence and risk context for review; responsible customer personnel make final operational decisions.

Shared responsibility

Clear ownership across the operating model.

The final responsibility matrix is documented for each implementation. This is the default enterprise starting point.

Dataviss

  • Secure development and release practices for the delivered solution
  • Product-level access, logging and configuration capabilities
  • Investigation of reported product vulnerabilities

Customer

  • User authorisation, endpoint security and local network controls
  • Lawful data use, source-system permissions and retention requirements
  • Validation of findings and ownership of operational decisions

Shared

  • Approved architecture, data flows and integration boundaries
  • Deployment hardening, testing and change coordination
  • Incident communication and business-continuity planning
Procurement disclosures

Clear answers before due diligence begins.

Controls vary by product, hosting model and customer architecture. Dataviss confirms the applicable boundary in solution design and contract documentation rather than making one blanket promise for every deployment.
D-01

Data residency

The processing location and storage boundary are selected and documented for the contracted cloud, on-premise, edge or hybrid deployment.

D-02

Service providers

Relevant infrastructure and service providers are disclosed for the proposed production architecture. The list depends on the services selected.

D-03

Retention and deletion

Retention, export, backup and deletion expectations are agreed for the deployment and aligned with the customer’s authorised use.

D-04

Incident handling

Reported security events are triaged by scope and severity. Notification responsibilities and response expectations are defined in the applicable agreement.

D-05

AI decision boundary

AI Analysts prepare evidence and recommended investigation. They do not assume autonomous write-back to plant controls or final operational authority.

D-06

Certification status

Dataviss does not claim a certification across products or deployments unless supporting evidence applies to the specific entity, service and scope.

Detailed architecture diagrams, data-flow maps, service-provider disclosures and contractual controls are shared during a qualified enterprise review where applicable.

Enterprise assurance

Plan the security review before deployment.

During solution design, Dataviss can support architecture and data-flow review, security questionnaires, deployment responsibilities and product-specific control discussions. Availability and scope depend on the proposed solution and agreement.

Architecture reviewData-flow mappingSecurity questionnaireResponsibility matrix
Security contact

Start an enterprise trust review.

Contact us with the intended use case, deployment preference and review requirements. Do not include credentials or unnecessary sensitive data in the first message.