Ingest
Schema-validated MQTT and HTTPS endpoints. Avro and Protobuf payloads. Replay buffering at the gateway, so nothing is silently dropped.
MQTT 5HTTPSAvroProtobufSchema Reg.
From signal to decision,
in milliseconds.
Zoniax is a vertically engineered stack — sensor, edge, control plane, and SaaS — for plants that need to act on data, not just store it. The brief below is what we describe to engineering and IT stakeholders during a pilot kickoff.
Four spans, one contract.
Each span exposes a typed boundary the others depend on. Replacing a span — for compliance, for performance — should not invalidate the rest.
Edge compute
Signed WASM modules execute deterministic rules at the edge. Drift detectors and quality scorers run beside the asset, not in the cloud.
WASMRustOPC-UALoRaWANBLE
Identity
OIDC and SAML SSO. RBAC scoped to plant / line / asset / channel. SCIM for provisioning. Signed audit trails for every action.
OIDCSAMLSCIMRBACAudit
Integration
Native adapters for the systems plants already run. Bi-directional where useful — work orders out, KPIs in.
ERPMESCMMSData lakeWebhooks
Three deployments — same product.
Cloud
SaaS console on infrastructure we manage and operate. The fastest path to value.
On-premises
The same platform, deployed inside your network. Air-gapped variants available. Updates as signed bundles.
Hybrid
Sensitive telemetry stays on-prem, aggregated KPIs and ML training run in cloud. Selectable per channel.
A short note on trust.
The platform is built around three default assumptions: the network is hostile, the operator is the source of truth, and every action eventually becomes evidence in an audit or incident review.
- 01 Defense in depth. Encryption in transit and at rest, mutual authentication at the edge, and hardware-backed protection where the deployment supports it.
- 02 Signed everything. Edge rule modules, firmware updates, and audit-log segments are cryptographically signed and verified before activation.
- 03 No customer co-training. Models that operate on your plant are trained from your plant's data. We don't aggregate operational data into shared corpora without explicit research agreement.
- 04 Right to leave. Documented exports for every customer-owned data class. Standard formats. No proprietary lock-in for the timeseries itself.
Bring us your
hardest line.
We'll spec a pilot scoped to a single line you already know is expensive — and we'll commit, in writing, to measurable signals in the first 30 days.