What stays on-site, and what leaves the site?
Edge runtime: local processing and buffering. Cloud app: review, diagnostics, rollout state—what the floor team and leads actually work from.
Four decisions: edge-first by default—what stays on-site vs what the cloud app carries; whether incidents and evidence hold up in review; whether rollout and recovery stay visible and bounded; and how handoff to your other systems is scoped.
Use this to decide whether you can cut over without losing the thread on data, evidence, rollout, or handoff to downstream systems.
Edge runtime: local processing and buffering. Cloud app: review, diagnostics, rollout state—what the floor team and leads actually work from.
Incidents ship with evidence, verification, and context on one operating record—not a clip chased outside the system.
Rollout state and diagnostics stay in the product; recovery paths are bounded instead of one-off field hacks.
Workflow continuation to customer systems is in place today; wider handoff, acknowledgements, and sign-off are scoped per deployment.
Edge runtime: local processing, buffering, site-side policy evaluation.
What the cloud needs for review, status, evidence, and follow-through—not a silent data pipe.
Org, site, role, and action—so operators and admins stay in their lane.
Incidents stay tied to reviewable evidence and the platform context around them.
Bring-up, diagnostics, and recovery run through visible state and defined workflows in the product.
Handoff to your systems stays on defined integration paths—no open-ended workflow sprawl.




Org- and site-scoped roles; actions match the job; invites and account changes leave a trail you can audit.
Health and metrics sit behind the same access rules by default. Broader read access is an explicit turn of the dial—not an accident.
MFA with TOTP on cloud sign-in, stronger password handling, lockouts, and hardened sessions—without a bespoke IT project per login.
Who viewed or exported evidence is logged and searchable. Exports roll up by org/site; downloads follow the rules you set for who may pull what.
One-click Trust Pack for customer review: SBOM, scans, runbooks, and current SLO evidence when you ship it.
Scoped access, evidence that holds up in review, encryption at rest called out, rollout kept on a short leash—meant for a real pilot, not a slide deck.
Extra detail for operators and evaluators. Skip if the sections above already answer it—nothing here is required to use what’s on this page.
Staged rollout, visible changes, and what keeps live-site updates from turning into ad hoc edits.
Queue-first review, evidence on the record, and follow-through your floor can run.
Readiness checks, evidence bundles, and final review outputs leadership can actually read.
Who sees which sites and devices, how roles are split, and where admin ends and operator begins.
From readiness checks through final review—one path, end to end.
Edge runtime, cloud control plane, and handoff to your stack—how the pieces line up.
Strong first workflows: visible on the floor, reviewable in the app, sized for a first site.