Signed sessions
Sessions are signed to protect against tampering.
Security and data
Your plant. Your data.
Each person sees only what they should, and your data stays yours to take at any time.
Roles
Five roles. No guesswork.
Each user is given a role, and the role decides what they can see and change.
01
Admin
Company, users, plants and every setting.
02
Manager
Runs plants, alarms, work orders and reports.
03
Technician
Alarms, tickets and tasks. Earnings stay hidden.
04
Observer
Sees plants and performance, changes nothing.
05
Investor
A read-only view of output, earnings and reports.
Same rules everywhere
On the desktop, the tablet and the phone app.
Plant access
Access by plant, not by company.
Give each person the plants they work on, and nothing else.
- Plant-level access: each user sees only the plants they are given
- Read-only sharing of a plant with another company, such as an owner or investor
- Earnings hidden from technicians, who see CO2 avoided instead
- Admins add users and decide which plants each one sees
Sign-in
A front door that holds.
Standard protections on every login and every session.
CSRF protection
Changes are only accepted from GridMarshal's own pages.
Login rate limiting
Repeated login attempts are limited.
Optional captcha
Can be switched on for login and password reset.
Secure cookies and HSTS
Over HTTPS, cookies are secure and HSTS is set.
Security headers
Browser protections are set on every page.
Data and backups
Backed up daily. Yours to take.
Owners keep their data and can export it at any time.
- Daily database backups with rotation
- Export your data to Excel at any time
- Automated exports on a schedule
- PDF reports: daily, monthly, ticket and task
Private deployment
On your own server, if you need it.
For teams whose data must stay inside their own walls.
- Private deployment on your own server is possible
- The same platform, roles and protections
- Your rules for where data lives and who reaches it
Event log
A record of every change.
When something changes in the platform, it is written down.
Event logFive rolesPlant-level accessRead-only sharingDaily backupsExport any time
Can technicians see what a plant earns?
No. Income is hidden from the technician role. Technicians see CO2 avoided instead.
Can I share a plant with an investor or owner?
Yes. A plant can be shared read-only with another company, or you can add their people with the observer or investor role.
How do I get my data out?
Export your data to Excel at any time, or set up automated exports. Your data is yours.
Can GridMarshal run on our own server?
Yes, private deployment is possible. Tell us about your setup and we will walk through it with you.
Roles, access and data
Ask us about security.
See roles, access and exports for yourself in a walkthrough.