SolisCloud Monitoring Platform and Data Logger Security
Overview
SolisCloud is the cloud-based monitoring and operations platform for Solis photovoltaic (PV) systems. Together with Solis data loggers, it forms a secure, end-to-end solution designed for the distributed and mission-critical nature of solar power generation. The platform follows a defense-in-depth security strategy to protect customer data, devices, and operations from device to cloud.
Data Protection
- Encrypted Communications: All communications between data loggers (Wi-Fi, LAN, 4G) and SolisCloud are secured using industry-standard TLS/SSL encryption, protecting data in transit.
- Unique Device Identity: Each data logger is provisioned with a factory-installed unique cryptographic key (one-device-one-key), ensuring cryptographic isolation between devices.
- Secure Data Storage: Customer data is stored in ISO 27001–certified data centers located in Frankfurt, Germany, with processing fully compliant with GDPR.
- Privacy by Design: Only data necessary for platform operation is collected. Users can access, correct, or delete personal data directly through the platform.
- Business Continuity: Multi-region redundancy and regular backups ensure high availability and rapid recovery.
Access Control & Account Security
- Multi-Factor Authentication (MFA): Platform access requires username/password plus a one-time verification code.
- Role-Based Access Control (RBAC): Permissions are assigned based on defined roles (e.g., Plant Owner, O&M Manager, Viewer), preventing unauthorized actions.
- Organizational Data Isolation: Multi-level account structures allow secure separation of data between organizations, subsidiaries, and partners.
Device & Network Security
- Secure Device Binding: Only pre-registered data loggers bound by unique serial numbers can connect to SolisCloud.
- Network Protection: Cloud infrastructure is protected by firewalls and intrusion detection systems (IDS) to identify and block malicious traffic.
- Proactive Testing: Regular third-party penetration tests and vulnerability scans are performed to identify and remediate risks.
Auditability & Operational Security
- Comprehensive Audit Logs: Critical activities such as logins, device controls, and configuration changes are fully logged and traceable.
- Real-Time Alerts: Intelligent alerts detect abnormal logins, device outages, and performance anomalies.
- Secure Maintenance: Local debugging uses encrypted Bluetooth connections, while advanced O&M tools reduce the need for on-site interventions.
Compliance & Standards
SolisCloud aligns with recognized international security and regulatory standards, including:
- ISO 27001 (Information Security Management)
- GDPR (EU Data Protection)
- EN 18031 (Encrypted Communications)
- EN 303 645 (IoT Security Baseline)
- UK PSTI Act (Product Security)
Summary Statement
SolisCloud provides a secure, compliant, and resilient monitoring platform for photovoltaic systems. Through strong encryption, strict access control, device-level isolation, continuous monitoring, and internationally recognized standards, Solis delivers a security architecture suitable for enterprise, utility, and commercial solar deployments.
- This summary is based on the official “SolisCloud Monitoring Platform and Data Logger Security” documentation by Ginlong Technologies Co., Ltd. Information is subject to change without prior notice. The official document you can find attached to this article
.
