What we have today and what is still only planned
This page separates the two, because your IT department will check anyway. The Google Cloud infrastructure certifications are confirmed by external auditors. ISO 27001 certification of our own organisation is a plan, not a fact, and that is how it is described here.
Technology stack
The technologies that power the HydroNexis platform.
The HydroNexis platform runs as SaaS on Google Cloud infrastructure (European region, full GDPR compliance). The backend is written in enterprise-class Java, the frontend is a web application accessible from any device without installation.
We integrate with customer systems (SCADA, ERP, billing) through a REST API and industrial protocols. Intelligent modules based on the Google Gemini API analyse intake technical documentation, while predictive models detect anomalies in pump operation and anticipate failures before they occur.
The platform source code is entirely ours, customer data is always portable (export to open formats), and in the on-premise model the installation runs without our continued involvement.
Two deployment models
The customer chooses the model that fits their security policy and internal requirements.
Cloud (SaaS)
The application runs on Google Cloud Platform infrastructure in the European region. The customer maintains no server infrastructure of their own - we are responsible for hosting, updates, backups and monitoring.
On-premise
A full installation of the platform on the customer's servers. Data never leaves the organisation's infrastructure - the typical choice for municipal water companies with a "critical data stays on our own network" policy.
Both options run the same software - they differ only in where the data is stored, the commercial model and who is responsible for the infrastructure.
Cloud infrastructure - Google Cloud Platform
In the SaaS model we host the platform on Google Cloud infrastructure in the European region.
EU region
All data is stored in Google Cloud's European data centres. There is no transfer of data outside the European Economic Area.
Cloud SQL Enterprise
A PostgreSQL database hosted on Cloud SQL Enterprise with automatic backups, point-in-time recovery and optional high availability.
Encryption by default
Google Cloud encrypts data at rest and in transit as standard. Keys are managed by Google, with the option to move to customer-managed keys (CMEK).
Backups
Automatic backups performed by Cloud SQL with configurable retention and the ability to restore the database to any point within the last few days.
Google Cloud infrastructure certifications
Google Cloud Platform - the infrastructure on which we host the platform - holds the following security certifications, regularly confirmed by independent auditors:
Choosing Google Cloud as the underlying infrastructure means our customers inherit a range of ready-made safeguards and compliance controls. We build our own organisational and technical processes on the same standards, in line with industry good practice and in close cooperation with our customers in the water sector.
The full list of Google Cloud certifications ->Application security mechanisms
What specifically protects data inside the HydroNexis platform.
Connection encryption
All client-application communication runs over HTTPS with a TLS certificate. This covers the web portal, the mobile app and API integrations.
Access control (RBAC)
Every user is assigned a role (operator, manager, dispatcher and so on) with a specific set of permissions per screen and per action. The policy is configurable for each organisation.
Organisation isolation
Each organisation's data is logically isolated. A user sees only their own company's assets and operations. Organisations have no access to one another's data.
Operation auditing
Every remote pump control operation is recorded in the signal history with who, when and in what mode. A full audit trail for compliance with your security policy.
Password policy
User passwords are subject to a policy covering minimum length, complexity and periodic renewal. Passwords are stored hashed (scrypt), never in plain text.
Account management
User accounts are never deleted, only deactivated. This preserves the integrity of the operation history and reports for audit purposes.
Regulatory compliance
We support water operators in meeting Polish and EU regulatory requirements.
GDPR
All data is processed in accordance with the GDPR. Hosting exclusively in the EU, data encryption and mechanisms for exercising data subject rights. A data processing agreement is concluded with every customer.
Statutory reports
The platform generates the reports required from water operators: statistical returns, the national urban wastewater programme, and reports for the Sanitary Inspectorate and Polish Waters. We keep the formats up to date with current requirements.
Water permits
The WMS module automatically monitors permit validity dates with alerts 90, 60 and 30 days before expiry. VALID, CRITICAL and EXPIRED statuses are visible on the organisation dashboard.
Surveying standards
The GIS module is designed for full compliance with Polish surveying standards: K-GESUT, BDOT500, the land register, the address register, the national validator and work notifications to the district surveying office.
Materials and contact at hand
The code opens the page directly on your phone. You will find the same set at our trade fair stand.
Documentation before any sales conversation
If your IT department needs materials for its assessment, we send them without arranging a presentation. The conversation is optional.