Security
Security built in, not bolted on.
The systems we build run in stores, plants, museums and protected sites. That is why we design security from the device to the user: data in Poland or on your server, encrypted communication, roles and a full event log.
// Limonfy Platform · security
Platform preview — demo data
How we protect data
Six layers of protection.
Data in Poland or on your premises
The platform in the cloud on servers in Poland, or on a server at your site.
Encrypted communication
Device and user connections are encrypted; service access goes through VPN.
Two-factor login
One-time codes and backup codes, sessions protected against hijacking.
Roles and scopes
Every user sees only what they are authorised to see.
Event log
Who changed what and when, available to the administrator.
Separated device networks
A separate radio network for each client, device network isolated from the office network.
Data flow
Security at every stage of the data flow.
Device
Encrypted radio transmission, a separate network identifier for each client.
Gateway
Local processing and buffering when offline, remote access only via VPN.
Platform
Servers in Poland or at the client, backups, role-based access.
User
Two-factor login, permissions, activity log.
Remote service
Service with access, not with an open network.
- Service access to devices over VPN, without opening the store or plant network
- Every connection recorded in the log
NIS2
We support clients covered by NIS2
Local processing, network segmentation and an event log help meet the directive’s requirements on the client’s side.
Status
What we already have and what we are working on.
ISO/IEC 27001
We are implementing an information security management system together with a lead auditor.
In progress
GDPR
Data processing agreements and technical measures described in the contract.
Questions and answers
Before you ask.
Where is our data stored?
On servers in Poland, or on a server at your site if the data must not leave it.
Do you have ISO 27001 certification?
We are implementing a system compliant with ISO/IEC 27001 together with a lead auditor. We will announce the certification date once it is set.
Will you complete our security questionnaire?
Yes. We answer supplier questionnaires and share a description of the architecture.
Does AI process our data?
No. AI models have no access to client data.
How does service access our devices?
Over VPN, with every connection recorded.
Security requirements
Let’s talk about your requirements.
Send us your security questionnaire or a list of requirements. We will show the architecture, data flow and safeguards before you make a decision.
- 01Supplier security questionnaire
- 02Architecture and data flow
- 03Data processing agreement (GDPR)
- 04A pilot with an agreed access scope
Write to us
hi@limonfy.comClick the button and your e-mail app will open with a ready-made message template. Fill in a few lines and send.
In your message, include:
- Full name
- Company
- Industry
- Number of locations
- What you want to solve
We reply within 12 hours.
Prefer to talk?
+48 792 355 613The data in your message is controlled by LIMONFY sp. z o.o. We process it to respond to your enquiry (Art. 6(1)(b) and (f) GDPR). You have the right to access, rectify and erase your data and to object. Details: privacy policy.