Capability · for IT, plant head, owner
Your data stays in your plant, and updates cannot strand you
The box being updated is running a production line. An update that half applies, or boots into something broken with no way back, does not cost a reboot. It costs a shift.
One edge box per plant, internet optional
PostgreSQL on hardware you own, on your LAN. No cloud dependency in the runtime path, no per-seat tax, and your traceability data never leaves the building unless you decide it should.
Verified before a single byte is downloaded
The update manifest's signature is checked first. An attacker who can serve bytes should not even be able to make the box spend bandwidth, let alone unpack their payload. Every artifact is then checked against the digest named in that signed manifest.
Atomic apply, automatic rollback
Unpack into staging, flush to disk, then swap a symlink. The running install is never modified in place, so power loss mid-update leaves the old version intact. If the new version fails its health probe inside the deadline, the box rolls itself back and the previous release is kept until the new one is confirmed healthy.
Downgrades are refused unless explicitly a rollback
A manifest signed last year is still perfectly signed. Replaying it must not walk a box backwards into a known problem.
The USB path runs identical code
Plenty of shop floors have no internet. The same signed bundle can arrive on a USB stick and goes through exactly the same verification, with no shortcut for being on local media. A USB stick found in a car park is not a trusted source.
Book a 20-minute line walkthrough
We walk one line, list what each operation should capture, and tell you plainly which of your machines can be read. You get that list whether or not you buy anything.
Where this matters
- General assemblyMost plants do not fit a template. Some lines move, some cells batch, some stations have instruments and some have an operator with a spanner. Trace is configured to the line you actually have.
- MES or standalone traceability: choosing without over-buyingWhen a full MES is the right answer, when standalone traceability is, and the questions that separate the two for a mid-size manufacturer.
- Recall and forward traceGive Trace a component lot code and it returns every finished unit that consumed it, where each one went, and when. An indexed lookup, not an overnight report.