Skip to main content

Privacy and security

SEMS keeps your measurements, events, settings and user accounts on the controller at your site, and you can view or export them at any time. The Privacy and data page in SEMS says the same.

What leaves your site​

SEMS only sends data out for a specific job.

PurposeWhat is sentSent to
Weather forecastSite coordinates and time zoneWeather service
Electricity pricesDelivery date and market areaElectricity price provider
Network time blockCurrent local timeNetwork tariff service
Remote support, if connectedDevice identity, system health, alarms and energy dataCyberSun support
Event notifications, if you set them upThe event that triggered the ruleYour notification service
ClockA standard time requestTime server

The web interface loads nothing from outside: no fonts, scripts, analytics or tracking.

How SEMS protects access​

The web interface is only available over HTTPS, with the controller's own certificate or one you upload. Everyone signs in with their own account and role, checked on every request, and passwords are stored only as Argon2 hashes.

On first sign-in SEMS asks for a new administrator password of 12 to 128 characters, with at least three kinds of characters and without the controller's serial number or name.

A firewall blocks every incoming connection the controller does not need, and SSH on the local network is off unless an administrator switches it on.

Updates​

Updates are signed by CyberSun, take the site offline for only about 3 minutes, and roll back automatically if something goes wrong.

Support files​

The Events page can produce an encrypted support bundle with logs, configuration and the last 24 hours of measurements, which only CyberSun can open.

Your rights​

You can export your data from the History pages. A factory reset deletes all customer data from the controller, but not copies held by the monitoring service or in backups you downloaded. For personal data questions or security problems, write to security@cybersun.si.