Settings

The Facilis edge agent reads from PLCs, SCADA, historians, and sensors. It never writes to a control system unless a per-device scope grant is signed by an authorized operator and explicitly enabled in Settings. Writes are off out of the box.

The Facilis edge collector runs store-and-forward replication outbound only. It never exposes an inbound port, never hosts a management interface, and cannot be reached from the internet. Remote administration happens through the central Facilis control plane, never through the plant network.

Facilis requires the edge agent be deployed on a DMZ or a dedicated OT historian network segment — never directly on a level-1 controls LAN. We provide a reference architecture and validate network placement during install.

If a customer explicitly enables writes to a specific device (e.g. CMMS or MES, never a PLC control word), the scope is limited to that device, signed by an admin with MFA, recorded in an immutable audit log, and revocable with a single click.

Facilis will never, under any configuration, write a control setpoint to a PLC, DCS, or safety system. Agents draft work orders and notifications; humans and downstream systems execute control changes. This is a product-level guarantee, not a toggle.

All data in the edge buffer is encrypted with AES-256. All connections to the central control plane use mTLS with certificate pinning. Customer data in Facilis cloud is encrypted at rest in AWS KMS with customer-managed keys available on request.

Facilis can run fully disconnected from the internet for air-gapped deployments. In this mode, agents run on the local edge with no central telemetry, no software auto-update, and no remote support. Air-gap mode is a licensed configuration, available for regulated industries.