The same Overvis HMI, in our EU cloud or on your own servers, with the AI models you choose.
Our cloud or your servers
EU cloud, dedicated cloud, your own data centre or an air-gapped network.
Minimise the surface
No passwords and no admin API. Devices sit in a closed VPN.
Full control
The AI writes nothing to a device until a person approves it.
Each site is isolated
Own members, roles and equipment per site, on one bill.
| EU cloud | Dedicated cloud | On-premises | Air-gapped | |
|---|---|---|---|---|
| Where it runs | Overvis servers in Germany, shared | A separate installation for you, in the EU or in your own cloud account | Your data centre, inside your network | Your hardware, in a network with no internet |
| AI models | EU-hosted models | EU-hosted models or your own provider | Your own provider or models on your servers | Models on your servers |
| Data leaves your network | Yes, to Overvis in Germany | To your chosen region only | Only where you allow it | Never |
| Operated by | Overvis | Overvis | Overvis with your IT | Your IT, with Overvis support |
| Updates | Continuous | Scheduled with you | Scheduled with you | Delivered as packages |
| Sign-in | Email code, passkeys, authenticator | SSO with your identity provider | SSO with your identity provider | SSO with your identity provider |
| Ready for a pilot | The same day | Within weeks | Within weeks | Within weeks |
Servers
Overvis runs on its own infrastructure, not on AWS, Azure or Google Cloud, and depends on no cloud provider. That is why the same system installs on your servers unchanged.
On your own servers you can close everything to the internet except what your end clients need, such as viewing their stored data.
Access
There is no admin API with its own sign-in or wider access. Every call is made as a user and limited to that user's role, so no key or account opens all the others.
People sign in with a passkey, a one-time code by email or from an authenticator app, or SSO with your identity provider. A passkey's secret never leaves the person's own devices.
Devices
Each device connects to the servers through its own encrypted VPN tunnel. The VPN carries no traffic between devices or between users, so one device cannot reach another.
A device answers only requests from your servers, and only the ones your installation uses. Where a controller cannot filter requests itself, the MC252 and the AI help set up the filtering in front of it.
Response
It lists who has which role, which API keys exist and which devices are connected, and goes through them with your team.
When a vulnerability is published, it finds the affected devices and prepares the changes. A person approves them before anything is sent.
Before anything is written to a device, a person with the right role approves it, with the device, the parameter and the new value in front of them.
Write limits. A value can have a minimum and a maximum. A write outside them is refused, whoever sends it.
Full audit log. Every action by a person or the AI: who, when and what, from a setting to a write.
Revert. Return a workspace to an earlier setup when a change was wrong.
Assistant action
Do you allow the assistant to lower the peak demand limit at the factory?
Five roles, View only, Operator, Editor, Admin and Owner, decide what each member of a workspace can see and change. The AI acts with the rights of the person who asked.
Roles per workspace. The same person can be an Editor on one site and View only on another.
SSO. Sign in through your identity provider, over SAML or OpenID Connect, on enterprise installations.
Keys with your rights. API keys act with their owner's rights, and admins see every CLI key in the workspace.
Current members
Anna Lind
anna@example.com
Tomasz Kowal
tomasz@example.com
Marek Nowak
marek@example.com
Jonas Weber
jonas@example.com
Night shift
nightshift@example.com
Field service
service@example.com
External auditor
audit@example.com
The assistant works as the signed-in member and can do only what that role allows.
Databases, services and the API all scale out. An installation starts on a few servers and grows with no fixed limit on sites, devices or users.
Full isolation: devices, data, dashboards, automations and the audit log stay inside their own workspace. Nothing in one workspace can read another.
Devices, readings, dashboards, alarms, automations and the audit log are all in a documented, typed API, which the CLI uses too. Your team or integrator builds the integration with your WMS, MES or APS on it.
We agree on the scope
A call about your sites, equipment and security requirements, and the deployment that fits them.
Your team works on real equipment
Gateways go in, the AI sets up the devices, and your team works with it on one site.
You get a written review
A report on what was set up, how your team used it and what a roll-out would take.
The roll-out is quoted per year
The quote covers the deployment, gateways at volume price, invoicing and the SLA.
In the EU cloud, on servers in Germany. In a dedicated cloud, in the EU region or the cloud account you choose. On-premises and air-gapped, on your own servers and nowhere else.
Yes. Use your own provider account, or models running in your infrastructure. An air-gapped installation always runs on models inside your network.
A person with the right role. Every write to a device and every change to the setup waits for their approval and goes into the audit log. Write limits are checked before anything is sent.
Yes, on enterprise installations: SAML or OpenID Connect with your identity provider, such as Microsoft Entra ID, Okta or Google Workspace.
Human approval before changes, a log of every action and role-based access are the controls both expect. Overvis HMI holds no certification yet; send your questionnaire and we answer it in full.
Yes. Device setup, screens and the full history of readings export with tools built into the product.
Updates are scheduled with your IT. Air-gapped installations receive them as packages your team installs.
It is quoted for the site: the gateways, the usage for its duration and the support. The proposal states it in writing before anything starts.
Yes. The software and the gateways can carry your brand, with regional exclusivity open to negotiation. The Partners page covers reselling.
Yes, at volume prices, with one billing account for all your sites and invoicing by bank transfer.
This site uses necessary cookies. You decide about the rest. Cookie Policy
