Security

Built for audits. Run in production.

The same platform that runs our own charging network in the UAE carries the security posture your review will ask about.

WSS / TLS in transitRBAC · TOTP · audit trailsISO-certified

Posture

Three answers before you ask.

Encrypted in transit.

Chargers speak to the platform over secure WebSockets. Console and app traffic runs over TLS. Nothing rides in the clear.

Isolated by design.

The connection layer is a dedicated service. A restart there never signs your team out. Chargers keep their sessions while you ship the console.

How the layer is isolated

Access, controlled.

Role-based access, TOTP for sign-in, and audit trails on the actions that matter, documented for your review.

Console

Enterprise controls, not an afterthought.

Roles with teeth.

Permissions are granular: who sees revenue, sends charger commands or manages customers is explicit. Not just admin and user.

Two-factor for staff.

TOTP is built into staff sign-in. Require it before the first session when your policy demands it.

Logged against a name.

Sensitive console changes tie to the person signed in. Audit coverage is documented before your security review, not invented on the call.

KYC when regulation applies.

Wallet and identity workflows with tracked steps where your market requires them: part of the product, not a spreadsheet workaround.

Chargers

Why the connection layer is separate.

A layer apart.

OCPP runs on a dedicated connection service, not inside the console. Charger traffic and console releases do not share the same fate.

Secure WebSockets, three versions.

OCPP 1.6, 2.0.1 and 2.1 over WSS, per charger. Console and app traffic over TLS. Nothing in the clear.

Field stays up when you ship.

Console maintenance or a thousand chargers reconnecting does not sign your team out. The layer that holds charger sessions keeps running.

Your chargers, your endpoints.

Each organisation's charge points connect through isolated endpoints end to end, including when you deploy the layer in your own region.

How the layer is isolated

Certifications

Audited quality, environment and safety.

ISO 9001:2015

Quality Management

ISO 14001:2015

Environment

ISO 45001:2018

Health & Safety

Deployment & disclosure

Your region. Your rules.

The connection layer is deployable in your own region where your policy requires it. Found something we should know about? Write to hello@zynetic.com and we will respond within one business day.

Your review

Bring your questionnaire.

We answer in writing or on a call: roles, two-factor sign-in, audit scope, OCPP architecture and regional deployment. Documentation is ready before the meeting. Same platform we run on our own charging network in the UAE.

Contact us

Walk your security team through it.

Bring your questionnaire. We will answer it line by line, on a call or in writing.

OCBC Centre, 65 Chulia Street #11-006, Singapore 049513
hello@zynetic.com
Offices in Singapore, Dubai and Abu Dhabi
We reply within one business day