Security and privacy
Built like infrastructure, because it is
MeterSight runs next to your switchgear as a hardened Windows service. This page describes exactly how the software is signed, how secrets and sessions are protected, what the network exposure is, and what data ever leaves your site (almost nothing).
Supply chain
Signed from build to update
Authenticode-signed binaries
Installers, updaters, support helpers and uninstallers are signed and timestamped as Wasatch Automation, LLC. The build verifies the bundled PostgreSQL installer's signature and the official Node.js checksum before compiling.
Ed25519-signed licensing
Licenses are signed with Ed25519 and verified with a rotating key set, so previously issued licenses keep working after a key rotation. The private key never ships with the product.
Verified updates with rollback
An update must carry a signed manifest that matches the product and this computer's device ID, an HTTPS package URL and a SHA-256 that is verified during download. A verified backup is taken first; if the new service fails its health check, MeterSight rolls back.
Runtime hardening
Secrets, sessions and the database
- PostgreSQL, SMTP, SFTP and SNMP secrets in a Windows DPAPI LocalMachine vault, excluded from UI reads, logs and backup archives
- Bundled PostgreSQL listens on loopback only; no database firewall rule is ever opened
- Non-superuser database owner scoped to the MeterSight database with a generated SCRAM credential
- Forced row-level security across measurements, readings, waveforms, devices, alarms, audit, backups, config and notification tables Gold
- Parameterized queries everywhere; rate-limited authentication and mutation endpoints
- Server-side session hashes, HttpOnly cookies, CSRF protection, 15-character passphrase policy and a common-password blocklist
- HSTS when served behind a same-host HTTPS reverse proxy
Data privacy
What leaves your site
Meter readings, reports, site configuration, users and backups never leave the machine. If you enable online licensing or updates, the only data transmitted is what is needed to do that job.
| Activity | Data transmitted | Optional? |
|---|---|---|
| Meter collection, dashboards, reports, alarms, backups | Nothing leaves the machine | Core function, always local |
| Online license activation | License key or product identifier, application version, device fingerprint and device name | Yes: offline signed license files are supported |
| Update check and download | Product, version, device ID and the update authorization | Yes: updates can be applied manually |
| Scheduled reports and notifications | The reports and alarm emails you configure, to the SMTP server you specify | Yes |
Details are in the Privacy Policy and in the MeterSight End User License Agreement provided with your order.
Operations
Designed to survive bad days
Backups that are actually restorable
pg_dump custom format, verified with pg_restore, weekly and before every update. Restore tooling and an admin recovery tool ship with every package.
Data is never silently deleted
Retention defaults to indefinite. Low disk raises a health warning. Uninstall preserves your database, waveforms, config, licenses and backups.
Service resilience
Delayed start, automatic recovery actions, Store & Forward spooling in Gold, and a poller built to tolerate meters that disappear and come back.
Need a security questionnaire completed?
We answer vendor security reviews for MeterSight regularly. Send yours and we will return it with references to the specific controls above.