SECURITY & COMPLIANCE
MayaUPS runs on infrastructure you control, with real controls around credentials, access, backups and logging. This page gathers what a technical, security, privacy or accessibility review typically needs, including the parts that are easier to leave out.
A shutdown policy starts in observation, where it can only watch and tell you what it would have done. You then run it as a test that switches nothing off, and it can be armed only once a recent test has passed. A kill switch stops every automatic action at once, and a restart safeguard returns armed policies to watch-only. MayaUPS performs no manufacturer configuration writes.
Nothing is sent to the publisher by default, and there is no product telemetry channel to disable. The single outbound path that exists is the Cloud fleet summary, and it is off until an operator sets all three required values on that site. Removing any one of them stops it.
Device identity, whether the device is reachable, named conditions with severity and onset, the last observation time and the reporting software version. No measurements, no history. It is outbound only over HTTPS, and a successful response is empty, so no command can return through it.
MayaUPS runs locally and your detailed monitoring data stays in infrastructure you control. If you enable the optional Cloud portal, the summary above is held on a server in Beauharnois, Quebec. Sites that must not talk outward leave it switched off and lose nothing else.
Encrypted SNMP credentials at rest, argon2id password hashing, SNMPv3 authentication and privacy, viewer, operator and administrator roles with an audit history, rotating daily backups, restore, storage protection, application health checks and optional file logging. There is no Java dependency.
This public website uses HTTPS and sends Content-Security-Policy, HSTS, X-Frame-Options DENY, X-Content-Type-Options nosniff and Referrer-Policy headers.
MayaUPS comes with a bilingual security policy, a coordinated disclosure process, a threat model, a security review, an installation-hardening guide and a CycloneDX software bill of materials. Vulnerability reports go to security@gdftech.com.
The product targets WCAG 2.1 AA and SGQRI 008. The website uses semantic landmarks, keyboard-operable navigation and forms, visible focus indicators, tested colour contrast and reduced-motion support.
Product information is available in English and Canadian French. MayaUPS is software you run and manage yourself; the Cloud portal is an optional view on top of it, never a dependency for monitoring or for safety.