Security
Security is the product, not a feature
Operators depend on AmpNexus to control critical charging infrastructure. Here's how we protect the platform, your data, and your fleet.
Certifications & assurance
Independently assessed
Cyber Essentials
AmpNexus is certified under the UK Government-backed Cyber Essentials scheme, covering firewalls, secure configuration, access control, malware protection and patch management.
ISO/IEC 27001
We are actively working towards ISO 27001 certification of our information security management system, formalising the controls we already operate day to day.
Platform security
Built for critical infrastructure
The same controls that appear in our API design show up everywhere in the platform.
Scoped API access
OAuth2 client-credentials flow with granular scopes (e.g. CP.READ, CP.CONTROL, FIRMWARE.WRITE) so every integration gets least-privilege access, plus API keys for server-to-server use.
RBAC & tenant isolation
Role-based access control for internal teams, partners and customers, with multi-tenant isolation enforced across the platform and the API.
Audit trails
Every sensitive action — remote commands, rollout approvals, access changes — is recorded with who, what and when, for compliance and investigations.
Encryption in transit
All connections to the platform, APIs and charge point endpoints are encrypted in transit using TLS.
Change control by design
Firmware and configuration changes move through cohort-based rollouts with approval gates, failure thresholds and automatic rollback — never big-bang changes to a whole fleet.
Monitoring & health
Continuous heartbeat, availability and diagnostics monitoring across the estate, with real-time alerting into your own systems via webhooks.
Live platform status
We publish platform availability openly. Check current status, incident history and maintenance windows any time.
status.ampnexus.netResponsible disclosure
If you believe you've found a security vulnerability in AmpNexus, please report it to us privately. We investigate all reports and will acknowledge yours promptly.
info@ampnexus.co.ukSecurity questions from a tender or review?
We're happy to complete security questionnaires and walk your team through our controls in detail.