Your data, your operations, your sovereignty

What it asks. Personal data is processed lawfully, securely and only as far as needed, and a processor works under a written agreement with the controller.

What Yggio and Sensative do

• Our Data Processing Addendum (Rev B): we process only on your instructions and notify a personal data breach within 24 hours.
• New sub-processors are announced 30 days in advance, and you may object. The current list is below.
• For customers in the EU/EEA, the UK and Switzerland, personal data is processed and stored in the EU/EEA unless agreed otherwise.
• Access rights per resource, single sign-on, and an access log kept for ten years. History is kept per connector for as long as you set, from two days to indefinitely.
• Occupancy sensors detect presence, not people: no cameras and no images.
• When the agreement ends, you can export your data for 30 days; then we delete or return it.

What stays with you. You are the controller: you decide the purposes, the legal basis and the retention periods, and carry out a DPIA where one is needed.

What it asks. Essential and important entities, among them many municipalities and water, energy and transport operators, manage their cyber risks, including those in their supply chain, and report significant incidents.

What Yggio and Sensative do

• Everything under How we work, everywhere (information security management, incident process, contingency plan, penetration testing, single sign-on and audit logs) is what you can bring into your own NIS2 risk management and supplier assessment.
• Yggio on your premises or at the edge connects outbound only, so no inbound port is opened in your network. Or it runs entirely inside it.
• Security vetting under the Protective Security Act (2018:585), arranged with you where an assignment requires it.

What stays with you. If you are covered by NIS2, the obligations are yours: your risk management, your incident reporting, and your assessment of suppliers. Our security organisation and risk register can be presented to you on request.

What it asks. Manufacturers of hardware and software that connects to a network design it securely, assess its risks, handle vulnerabilities, publish an SBOM, declare a support period with free security updates, and report to ENISA and the national CSIRT. Radio equipment already has to meet RED Article 3(3) and EN 18031, mandatory since August 2025.

What Yggio and Sensative do

• We are the manufacturer of our sensors, so these obligations are ours. Each product’s risk assessment documents which protections apply and why.
• Strips LoRaWAN are secure by design rather than by update: fixed firmware, a unique key per device and no remote attack path. An attacker must be within radio range of each sensor. Under jamming they back off to one attempt a day, so a sealed battery is not drained.
• Square and Puck firmware updates need physical presence and a check of ownership in Yggio; VSM apps are sandboxed and their changes logged.
• Every sensor is tracked from production in our build system, and over NFC a customer can reach only its own devices.
• How Yggio is covered depends on delivery: as a cloud service it is regulated through NIS2 rather than the CRA; installed on your premises or delivered on edge hardware it is a product under the CRA, with CE marking, declaration of conformity and technical documentation.
• An SBOM is generated in every Yggio build, components are monitored for known vulnerabilities, and security fixes are shipped separately from functional updates.
• Vulnerabilities can be reported to security@sensative.com, published in security.txt.

What stays with you. Usually you are the user: install security updates, name someone who reads our security advisories, and plan the lifecycle in the contract: sensors bought in 2026 will still be in the building in 2036. You become distributor, importer or manufacturer if you pass equipment on, buy directly from outside the EU, or substantially modify a product.

What it asks. Users get access to the data their connected products generate, and can share it. Customers of cloud and data processing services can switch provider and take their data with them.

What Yggio and Sensative do

• You own the data in Yggio. Our EULA states that nothing in it restricts your rights under the Data Act.
• Open-source payload decoders for Strips and for our VSM sensors are on GitHub, so any platform can read our sensors.
• Yggio can act as your LoRaWAN join server, so your device keys need not sit with a third party.
• One open API and the FIWARE NGSI-LD data model. Export through the standard functions, and for 30 days after an agreement ends.
• Share datasets with other organisations on your own terms in the Data Marketplace.

What stays with you. Decide who your data is shared with, and on what terms.

What it asks. AI is regulated by risk: some practices are prohibited, AI systems must be disclosed as AI, and high-risk uses carry duties for providers and deployers.

What Yggio and Sensative do

• Our AI policy rules out the practices prohibited by Article 5, and AI we operate is disclosed as AI, as Article 50 requires. A named person stays accountable for everything AI produces.
• Customer data and personal data are never sent to an external AI service by us, and never used to train a model.
• The Yggio AI Assistant answers from the documentation, runs on your own Anthropic or OpenAI account, and has a daily token limit you set.
• Anomaly-detection models are trained on your own sensor history inside Yggio, and each training run records its data, settings and results.

What stays with you. You decide where AI is used. If you use it for a high-risk purpose, for example as a safety component in critical infrastructure, the deployer duties are yours. Talk to us early.

What it asks. US authorities can require providers under US jurisdiction to hand over data in their possession, custody or control, even when it is stored outside the United States. FISA Section 702 adds intelligence collection, often under non-disclosure orders.

What Yggio and Sensative do

• Sensative AB, which develops and delivers Yggio, is a Swedish company; Yggio is developed and operated entirely by our own staff in Sweden. Our US subsidiary, Sensative Inc., is a sales company for customers in the United States only; it does not host or operate Yggio.
• For customers in the EU/EEA, the UK and Switzerland, Yggio as a service is hosted by Cleura AB, a Swedish cloud provider, in the EU/EEA.
• Customers established outside Europe are hosted by default on Amazon Web Services in Canada, or wherever we agree.
• For full operational independence, Yggio runs on your own servers or at the edge, with no connection to us required.

What stays with you. Choose the hosting option that matches your requirements. On your own premises, you hold all the keys.

What it asks. Sovereignty becomes a condition in public cloud procurement, through four assurance levels: level 1 as the floor for all public cloud procurement, higher levels where an activity touches public order, with level 3 requiring EU ownership, EU staff and EU jurisdiction.

What Yggio and Sensative do

• Sensative AB is owned and controlled within the EU: a few small shareholders outside the EU hold minority stakes without controlling influence. Yggio is developed and operated entirely by Sensative’s own staff in Sweden, and for customers in the EU it runs in the EU.
• Yggio as a service in Europe runs on Cleura, a Swedish provider, by default; other placement only at your request. Cleura describes its own sovereignty position at cleura.com.
• On your premises or at the edge, the cloud-provider role sits entirely with you.
• Measured against the criteria in the proposal (ownership and control, jurisdiction, and the infrastructure beneath), Yggio in Europe is structurally well placed for the higher assurance levels today. The certification scheme does not exist yet, so no provider can be certified; we will document Yggio against the levels as the implementing acts set them.

What stays with you. Public bodies will carry out a sovereignty risk assessment per use case. Until the levels exist, ask suppliers to describe their sovereignty position rather than writing level requirements into contracts that no one can yet meet.

What it asks. US customers, and public bodies in particular, often require data to stay in North America and to be operated by a provider they can assess.

What Yggio and Sensative do

• Yggio as a service can be hosted in the United States, on Amazon Web Services or another provider, as agreed in the order.
• Without such an agreement, customers outside Europe are hosted on Amazon Web Services in Canada.
• Yggio also runs entirely on your own servers or at the edge.
• Sensative Inc. is our US sales company; Yggio is developed and operated by Sensative AB’s own staff in Sweden.

What stays with you. Choose the hosting option that matches your requirements.

What it asks. Every radio device sold in the United States needs FCC equipment authorisation, and in Canada ISED certification.

What Yggio and Sensative do

• Our sensors for North America are certified by the FCC and ISED.
• The FCC and IC certification numbers will be listed on each product page.

What stays with you. Use the North American frequency plan (US915) and a network that supports it.

What it asks. Connected devices should be identifiable, securely configurable, protect their data and interfaces, take software updates and report their cybersecurity state.

What Yggio and Sensative do

• Device identification: each LoRaWAN sensor has its own DevEUI, and each Z-Wave sensor its own DSK.
• Data protection: LoRaWAN encrypts every message with AES-128, with keys set up at join.
• Configuration: over the air through Yggio, or locally by NFC for Square, Square Xtreme, Puck and Prism.
• Software update: VSM apps, almanacs and firmware over the air.
• State awareness: SIDD in-device diagnostics, and Yggio flags a device that misses an expected report.

What stays with you. If you are a federal agency, your security controls under NIST SP 800-213 remain yours; this mapping is input to them, not a certification.

What it asks. Federal agencies may not buy equipment that contains components from certain vendors, listed in Section 889 of the 2019 National Defense Authorization Act and on the FCC Covered List.

What Yggio and Sensative do

• Our sensors are developed in Sweden and manufactured in the EU, by our production partner JME in Poland.
• We can attest that our sensors contain no components from vendors restricted under Section 889 or on the FCC Covered List.
• The attestation is provided with a quotation or on request.

What stays with you. Request the attestation as part of your procurement.