Security, compliance, privacy and terms.

Governed by design.

Arcestra connects to the sensors, meters and controls a building already runs, and routes every fix through the people who approve it.

• Network isolation Runs inside your network, reached through an authenticated proxy.
• Zero-trust transport Mutual TLS for BACnet, Modbus and SNMP communications.
• Secrets management Credentials encrypted at rest, with dedicated secrets platforms.

Built to stand up to review.

Running vendor due diligence? Request a security review ↗

Your data stays yours.

• We do not sell, rent or trade your personal information.
• We do not use your information to train AI models.
• Access, correct or delete your data any time. We respond within 30 days.

Plain terms.

• The terms cover your use of the arcestra.ai website.
• Projected outcomes on the site are not guarantees. Results vary by facility.

Found a vulnerability? Tell us.

If you identify a potential security vulnerability in Arcestra's platform or website, please contact our security team directly. We acknowledge every report within 48 hours and share resolution timelines openly.

• Security reports security@arcestra.ai
• Procurement and CISO briefings security@arcestra.ai
• PGP key Available on request

We do not pursue legal action against good-faith security researchers acting within responsible disclosure guidelines.