TrustEU-hosted / proof-of-possession / signed OTA / TLS MQTT

What AGS keeps, where it lives, how it's secured.

AGS runs its own cloud on independent EU infrastructure, not on AWS, Google, or Azure. Device pairing requires physical possession. Every firmware update is signed. Every configuration change is auditable from the app. No third-party cloud sits in the control path.

Local-first by design - the room keeps running if our cloud ever goes offline.

Join the waitlist See specs

AGS provisioning screen — **Pairing is a visible flow, not a hidden ritual.**

Four commitments

EU hosting, local-first control, PoP pairing, signed updates.

Hosting

Independent EU infrastructure

AGS runs on an EU provider that is not AWS, Google Cloud, or Azure. Your data stays in the EU. GDPR is baked in, not bolted on.

Control plane

Local-first by design

Sensing, PID, schedules, PWM, and IR run on the hub. If our cloud goes offline, the room keeps running. The cloud is for visibility, history, and cross-device sync, not for keeping the lights on.

Pairing

Proof-of-possession onboarding

Device pairing requires physical possession and a short-lived token. The process is visible in the app, not a hidden rite. Matter plug commissioning uses the DCL attestation trust store for device authenticity.

Updates

Signed OTA, visible history

Firmware is signed. Downloads are tokenized. Every applied update is recorded with version and timestamp. Dual-slot flash means a bad update rolls back by itself.

What the hub talks to

TLS MQTT to the AGS cloud. Nothing else.

The hub has exactly one outbound connection: Mosquitto over TLS 1.3, to the AGS backend we host in the EU. No telemetry beacons, no analytics pings, no silent fallbacks, no third-party cloud in the control path.

TLS 1.3 with per-device MQTT credentials.
Proof-of-possession required to re-pair a hub.
OTA downloads are signed and token-gated.
Configuration history is append-only and visible in the app.

AGS configuration history screen — **Every configuration change: who, what, when.**

Screens that prove it

Four parts of the trust story, four screens.

AGS proof of possession — **Physical possession is required to claim a device.**

AGS configuration history — **Every configuration change is recorded and reviewable.**

AGS OTA history — **Firmware updates leave an audit trail you can read in the app.**

Still making up your mind? Read the FAQ.

15 straight answers on shipping, legality, warranty, refunds, and what can go wrong.

Read the FAQ Talk to me