[Skip to main content](https://www.75f.io/software/security/#main "Skip to main content")

**Unsupported Browser!** This website will offer limited functionality in this browser. We only support the recent versions of major browsers like Chrome, Firefox, Safari, and Edge.

# **75F Security:** A Safer Way to Manage.

## The World's Most Secure IoT-Based BMS.

### SOC 2 Compliant

75F is proud to join the list of leading organizations that have achieved SOC 2 compliance. SOC 2 (Service Organization Control 2) is a set of guidelines developed by the AICPA to help organizations ensure the security, availability, processing integrity, confidentiality, and privacy of data.

[Learn More](https://www.75f.io/news/75f-earns-soc-2-compliance/ "Learn More")

### VAPT Certified

VAPT is a rigorous process that probes, prods, and pushes a system's security measures to their limits. It looks for the most minute vulnerabilities, tests the resilience of the system against possible breaches, and ensures our solution isn’t just safe—it’s virtually impenetrable.

[Learn More](https://www.75f.io/news/75f-is-vapt-certified/ "Learn More")

## The ORANGE Security Framework

Security is paramount when it comes to protecting your commercial building and its valuable assets. That's why 75F developed the O.R.A.N.G.E. security framework — a comprehensive set of protocols that ensures the highest level of security for your building control systems. With O.R.A.N.G.E., you can have peace of mind knowing that your data, applications, and networks are safeguarded against potential threats. Explore each component of our security protocols below to discover how we keep your building secure.

[Read 75F's Security Guide](https://www.datocms-assets.com/55631/1666042621-75f-security-protocols.pdf "Read 75F's Security Guide")

* * *

## Organizational Security

## Role-Based Access

## Application Security

## Network Security

## Gateway Security

## Encryption

* * *

## **Organizational Security**

- Comprehensive security policies and procedures implemented throughout the organization
- Regular training and awareness programs to educate employees about security best practices
- Access control measures to ensure only authorized personnel have access to sensitive information
- Incident response plans and protocols to handle security breaches effectively

[Learn More](https://www.75f.io/news/organizational-security-at-75f/ "Learn More")

## **Role-Based Access**

- Role-based access control to restrict system access based on user roles and responsibilities
- Multi-factor authentication for enhanced user authentication and verification
- Access restrictions based on time, location, and device to prevent unauthorized access
- Audit trails and logs to monitor and track user activities within the system

[Learn More](https://www.75f.io/news/role-based-access-at-75f/ "Learn More")

## **Application Security**

- Secure coding practices to develop robust and resilient software applications
- Regular vulnerability assessments and penetration testing to identify and address security flaws
- Secure data input and output validation to prevent injection attacks
- Regular patching and updates to address security vulnerabilities in applications

[Learn More](https://www.75f.io/news/application-security-in-a-cloud-native-bms/ "Learn More")

## **Network Security**

- Intrusion detection systems to monitor and protect the network from unauthorized access
- Secure network architecture and load balancing to support critical systems and data
- Traffic encryption and secure protocols to protect data in transit
- Proprietary and secure 900 MHz wireless mesh network for device communication maintains continuous coverage no matter where you are

[Learn More](https://www.75f.io/news/network-security-in-an-iot-based-bms/ "Learn More")

## **Gateway Security**

- Secure gateway devices and applications to protect entry points into the network
- Application-level gateways to filter and inspect incoming and outgoing network trafic
- Intrusion prevention and detection systems at the gateway to block malicious activities
- Regular firmware updates and configuration reviews for gateway devices

[Learn More](https://www.75f.io/news/gateway-security-at-75f/ "Learn More")

## **Encryption**

- Encryption of sensitive data at rest using strong cryptographic algorithms
- Transport layer encryption for secure communication between systems
- Key management practices to ensure secure storage and distribution of encryption keys
- Regular encryption assessments to verify the strength and effectiveness of encryption measures

[Learn More](https://www.75f.io/news/how-75f-uses-encryption-in-the-o-r-a-n-g-e-framework/ "Learn More")

## Ready to Learn how an IoT-based System Works?

[Explore](https://www.75f.io/applications/how-it-works/ "Explore")

\\
\\
\\
\\
**Resiliency in IoT-Based Building Management Systems** \\
\\
Optimize your building's performance with our Building Management System. Improve efficiency, reduce costs, and enhance comfort with advanced automation and control.\\
\\
Read More](https://www.75f.io/news/resiliency-in-iot-based-building-management-systems/ "") \\
\\
\\
\\
Research **Browse our whitepapers!** \\
\\
We put the "smart" in "Smart Cities." Browse third-party studies from the National Renewable Energy Lab (NREL) and other long-form opinions and guides written for building professionals at the intersection of IoT, hardware, energy efficiency, and indoor air quality.\\
\\
Start Learning](https://www.75f.io/resources#whitepapers "")

\\
\\
\\
\\
**75F Security Protocols Document** \\
\\
The 75F platform incorporates protection in all stages of its lifecycle — read more about our security protocol here.\\
\\
75F Security Protocols Document](https://www.datocms-assets.com/55631/1666042621-75f-security-protocols.pdf "") \\
\\
\\
\\
**Understanding IoT in Building Automation** \\
\\
Enhance efficiency with IoT BMS and integrated automated building systems. Monitor, control, and optimize your building's operations for smart, sustainable management.\\
\\
Read More](https://www.75f.io/news/understanding-iot-in-building-automation/ "")

\\
\\
\\
\\
**A Full Stack Solution** \\
\\
The 75F HyperStat works out of the box with our complete sensor suite, and is Haystack native and BACnet compliant to support healthy, comfortable spaces.\\
\\
Read More](https://www.75f.io/news/introducing-75f-hyperstat-the-industrys-most-advanced-thermostat-and-humidistat/ "") \\
\\
\\
\\
**75F Named 2021 Global Cleantech 100 Company** \\
\\
We are proud to announce that global research and consulting organization, Cleantech Group, has named 75F to its 2021 Global Cleantech 100 Company list.\\
\\
Read More](https://www.75f.io/news/75f-named-2021-global-cleantech-100-company/ "")
