Security
Battery data, protected by design.
Evolvix separates this public website from its operational systems and limits every piece of battery data to the people entitled to see it. This page describes our principles, not implementation details that would help an attacker.
Security principles
Authenticated devices and batteries
Connectivity devices and batteries are registered and paired. Data from unknown or unpaired devices is not accepted.
Verified users
Customers and organization members sign in through Firebase Authentication. Operational APIs are never exposed anonymously.
Ownership- and organization-scoped access
Owners see their own batteries. Organization members see what their role allows. Authorization is enforced by the backend on every request.
Encryption in transit
Traffic between devices, apps, the console and Evolvix Cloud is encrypted with TLS.
Reporting a vulnerability
If you believe you have found a security issue, please email support@evolvixenergy.com with the subject “Security report”. Please do not include passwords, tokens or other people's data.