Touchpanels and HVACloud
Panel, system software, cloud and portal from a single source. What that means for your plants.
One device, two jobs
The Pro touchpanel is operator interface and edge client in one. On site the plant is operated from it, and the same device reads the controller and talks to HVACloud. No second device is needed in the control cabinet.
How it works together
Four parts, all built and maintained by us. Each knows the others, and the parts that matter are in our hands.
Touchpanel
TP10 Pro and TP8 Pro: rugged hardware with two separate network ports, one for the building, one for the plant.
NetPilot and sinnux
The system service on the panel is in charge of network, security and updates, on Android as on sinnux.
HVACloud
Data, alarms, visualisation and remote maintenance for the whole installed base, with updates from the cloud to the panels.
sinnotrade portal
Your devices, your users and their rights, service sticks, orders and returns in one place.
HVACloud in action
A look at the interface: plants on the map, the panel as edge client with its controllers, the data points, the analysis and the rules by which updates reach the panels.
Map
All plants with their alarm state at a glance
Edge client
The panel with load, networks and controllers
Data points and analysis
Controller values, trends over weeks
Rollout rules
Approvals and mandatory signatures per update
Your benefits
One point of contact
Hardware, system software, cloud and service come from a single source. When something goes wrong, nobody refers you from one maker to the next.
Remote maintenance without open ports
The panel builds the connection outwards by itself. No port is opened in the operator's network. Access applies per device, is time limited and logged.
Operation without a connection
Local operation continues without restriction, even when the connection to the cloud is down.
Updates without a site visit
Security updates reach the panels remotely, signed and released group by group. If a panel is not healthy afterwards, it returns to the previous version on its own.
Knowing what is in the field
Every device is known from the factory, with serial number and software version. Which devices a vulnerability affects is a query, not an investigation.
Rights per customer
You decide for your company who may create service sticks, approve apps or assign panels. A customer service stick opens only that customer's panels.
Aligned with the CRA
The reporting obligations of the Cyber Resilience Act have applied since September 2026, and all of its obligations apply from December 2027. It covers the device, its firmware and explicitly the cloud it connects to. With us, all three are in one hand.
Software bill of materials
Every version of NetPilot, sinnux and the sinnotrade apps comes with an SBOM. What runs on a panel is known.
Secure updates
A panel accepts updates only with the sinnotrade signature, and there is always a way back.
Vulnerability reporting
The platform has a way to report vulnerabilities, with a committed response time. It is described in the HVACloud trust center.
Certified operation
sinnograte is ISO 27001 certified for development and operation.
What we do not claim
A product is compliant only with its conformity assessment, and the obligations for it lie with the maker of that product. What we can show is the chain behind it: which devices are known, how an update reaches them and what we report when, in case of an incident.
Discover HVACloud
Everything about the platform, connecting controllers and the Cyber Resilience Act is on the HVACloud site. Or ask us directly.