Data sovereignty
Data sovereignty, from licence model to column.
For an operator of critical infrastructure, data sovereignty comes down to three questions: who owns the data, where the platform runs and who can see what. With Affectli, the answer to each is you.
You own your data
Under the Affectli Terms of Service, you retain all right, title and interest in your data.
Your teams define the ontology
Object types, links and actions are configured around your operation, in the language your engineers already use.
Your choice of AI
Affectli works with different AI engines and models (machine learning, predictive models, natural-language processing) on your live and historical data, with no lock-in to one AI vendor.
Built on open source
PostgreSQL, Apache Druid, Activiti for BPMN 2.0, React, GraphQL and Apache Spark. Percona supports the PostgreSQL databases behind Affectli.
Licensed three ways.
Each organisation’s data and configuration are kept separateHosted service
Affectli is hosted and run for you. Teams work in the browser on desktops, phones and tablets.
Platform service
Affectli as the platform on which your own teams and Channel Partners build, configure and run applications in Affectli Designer.
Your network, your site
The software runs within your own network, at your own business location, under your own operational control.
| Column | Control engineer | Field crew | Contractor | Asset planner |
|---|---|---|---|---|
| asset_id | Read | Read | Read | Read |
| site_coordinates | Read | Read | Assigned sites | Read |
| oil_temp_live | Read | Read | Denied | Read |
| dga_results | Read | Flag only | Denied | Read |
| protection_settings | Read | Denied | Denied | Masked |
| replacement_cost | Denied | Denied | Denied | Read |
| Time (UTC) | Actor | Action | Via |
|---|---|---|---|
| 07:18:43 | System | FDR-31 protection trip received | SCADA · Mi-Stream |
| 07:18:44 | Rule FAULT-ISOLATE-02 | INC-3307 opened | Events Monitor |
| 07:19:02 | PER-3302 · control engineer | WO-21874 raised for CRW-22 | Affectli |
| 07:19:20 | Policy POL-HV-AUTH | CRW-22 HV authorisation checked · valid | Access policy |
| 07:19:31 | PER-1187 · shift lead | Dispatch approved | Affectli |
| 07:31:05 | CRW-22 | PTW-0581 accepted on site | Mobile |
| 07:52:40 | CRW-22 | Faulted section isolated | Mobile |
| 07:58:12 | PER-3302 · control engineer | Back-feed via FDR-28 confirmed · 2,113 homes and businesses restored | Affectli |
Access decided by policy, down to the column.
Security policies are managed in one place. Each combines the classification of the data with the role of the person or team asking, and takes effect in real time on every database, table and column. A contractor and a control engineer can open the same transformer and see different fields.
- Classification-based and role-based rules, managed centrally
- Teams and workspaces with permissions, including contractors, vendors and partners
- End-to-end encrypted messaging and broadcasts
Every event, decision and action is time-stamped and attributed. Open any record in the Events Monitor and its full history is there: people, documents, status, actions and severity.
Access control in Affectli ↗Under the NIS2 Directive (EU) 2022/2555, an entity in scope owes an early warning within 24 hours of becoming aware of a significant incident, an incident notification within 72 hours and a final report within one month (Article 23). Affectli supports those duties by keeping the incident, the affected services and every action in one time-stamped record. Each entity remains responsible for its own compliance.
Source: Directive (EU) 2022/2555, Art. 23
Mi-C3 is certified to ISO/IEC 27001 for information security management, ISO 9001 for quality management, ISO/IEC 20000-1 for IT service management and ISO 14001 for environmental management.
Keep exploring
Bring one question about your network.
A briefing with Mi-C3 engineers, built around a decision you need to make and the systems behind it. We will show how the ontology answers it in Affectli.