Friolink security

Verifiable credentials

We only show what has already been obtained and anyone can check on the issuer's own website.

• SSL Labs A+

  Grade for the HTTPS setup (ciphers, protocols, certificates and HSTS) of friolink.com and login.friolink.com, measured by Qualys SSL Labs.

  Verify · friolink.comVerify · login.friolink.com

  Last checked: October 25, 2026

• Mozilla Observatory A+

  Grade for browser security headers (content policy without unauthorized inline scripts, HSTS, framing, referrer), measured by Mozilla.

  Verify · friolink.comVerify · login.friolink.com

  Last checked: October 25, 2026

• Service status

  Availability measured every minute by the platform itself: API, web app, device connection (MQTT) and reading ingestion. 90-day history and incidents.

  Verify

• Vulnerability disclosure

  Public policy for reporting vulnerabilities and contact in security.txt (RFC 9116). We reply within 3 business days and take no action against good-faith research.

  Verify · security.txtDisclosure policy

Encrypted end to end

• HTTPS with TLS 1.2 or higher (TLS 1.3 when the browser supports it) and HSTS on the website and the platform.
• Sensors connect over encrypted MQTT (TLS, port 8883), each with its own username and password and permission only on its own data. No anonymous access.
• The platform is not exposed on the office IP address: web access goes through Cloudflare Tunnel, with a web application firewall and login rate limiting.

Access

• Passwords of 10 characters or more, stored with bcrypt (never in plain text). Accounts lock for 15 minutes after 5 failed attempts, with an email notice.
• Two-step verification (TOTP codes and single-use backup codes) and a notice when someone signs in from a new device.
• The session lives in a cookie the page's code cannot read (HttpOnly, Secure, SameSite=Strict). Open sessions can be reviewed and closed from the profile.
• Roles with per-module and per-site permissions. A customer never sees another customer's data. Accounts are created by invitation only.

Records that cannot be altered

• The application can only add readings: the database does not allow it to change or delete them.
• Every day each device's readings are sealed with a chained SHA-256 hash; the seal can be verified online with its code.
• Alarm responses, signatures, reviews, alarm tests and configuration changes are append-only and hash-chained.
• Electronic signature: signing asks again for the password or the two-step code, and records the meaning of the signature and the hash of what was signed.

Audit trail

• Every change to ranges, rules, calibrations, site or device record keeps the previous value, new value, reason, user and time.
• Sign-in and session history per user.

Backups and continuity

• Live replica of the database at a second physical site, a few seconds behind.
• Daily database copies on the database server (30 days) and on separate in-house storage (14 daily and 8 weekly).
• Platform monitoring every minute, with immediate alerts to the technical team and a public status page.

Friolink Gateway with no open ports

• The gateway opens the connection to the platform (outbound HTTPS): no ports to open or forward on the customer's network.
• Remote access, when enabled, is per session (60 minutes), with per-site permission and on a domain separate from the platform.
• Updates are signed (Ed25519) and the gateway checks the signature before installing. No default passwords.

Secure development

• Every change goes through automatic secret scanning, static code analysis and dependency checks before release.
• Keys live only on the servers and in a password manager, never in the code.
• Domains with registrar transfer lock and CAA (only authorized certificate authorities).

Regulatory compliance

Friolink helps you meet the recording, alarm and traceability requirements of HACCP, ANMAT, SENASA, MSP and ANVISA. Friolink is not a certification body: compliance is assessed by each country's authority for each company.