>./cumplimiento·designed for audits

operational compliance · built for audits.

COFEPRIS, SCT, STPS, SEMARNAT. AstreaIoT logs temperature, humidity, energy, and critical events with timestamp and signature, for the retention each regulation demands. Audit day isn't an event — it's a report.

request a quote →see the evidence pack
>./normas --cobertura·I · eight regulatory frameworks

the regulations that actually matter in your operation.

NOM-251-SSA1-2009food · COFEPRIS

cold chain for food processing

Good Hygiene Practices in the food chain. Per-chamber temperature, humidity, door cycles, pests. Applies to supermarkets, restaurants, foodservice, 3PL.

magnitudes: T° · RH · doors · currentretention: product life + 1 year
NOM-072-SSA1-2012pharma · COFEPRIS

pharma labeling & storage

Per-SKU + per-location temperature, per label. Cold chain validated with calibrated probes + traceability paperwork. Applies to pharmacies, distributors, labs.

magnitudes: T° · RH · current · doorsretention: 5 years
NOM-007-SCT2-2010transport · SCT

refrigerated cargo transport

Per-vehicle temperature + GPS for refrigerated tankers and boxes in transit. Load-vs-unload reconciliation. Applies to 3PL, food and pharma transport.

magnitudes: T° · GPS · doorsretention: 5 years
NOM-024-SSA3-2010clinical record · COFEPRIS

vaccine & biologic cold chain

Temperature for immunization refrigerators and freezers. Zero tolerable excursions. Applies to hospitals, clinics, vaccination centers.

magnitudes: T° · alarms · doorsretention: lot life + 2 years
NOM-001-SEDE-2012electrical installations · CFE

electrical protection & submetering

Switchboards with continuous connection and balance monitoring. Per-circuit submetering identifies abnormal consumption + prevents electrical incidents.

magnitudes: current · voltage · power factorretention: 3 years
NOM-018-STPS-2015chemical substances · STPS

hazardous-chemical safety

Gas + vapor detection in storage and processing. Indoor air quality measured and reported. Applies to chemical, pharma, food.

magnitudes: CO₂ · VOC · particulatesretention: 3 years
IFT · NOM-127-SCFI-2006homologation · IFT

telecommunications equipment

All field hardware operating on LoRaWAN US915 bands meets IFT homologation before deployment. No unhomologated equipment on your network.

magnitudes: hardware homologationretention: equipment lifetime
LFPDPPP · 2010personal data · INAI

personal data held by private parties

Your chain operational data belongs to you. Privacy notice, per-user-and-role access control, encryption in transit and at rest, ARCO rights handled.

magnitudes: customer dataretention: per contract + 5 years
>./pack-de-evidencia·II · what AstreaIoT delivers on audit day

the evidence pack auditors ask for.

per-equipment time series

Temperature, humidity, current, door — one chart per equipment, with NTP timestamps and shaded regulatory range.

critical events + corrective action

Each excursion logged in detail: when, how long, who handled it, what action was taken, signature of responsible party.

applicable NOM/SCT/STPS report

Template per regulation. Pre-filled with period data. Signature of Responsable Sanitario or equivalent. Print-ready or send-ready PDF.

continuity declaration

Proof that monitoring was never interrupted during the period: heartbeats, gateways, calibrated probes, battery never below threshold.

>./audit-prep --timeline·III · from T-21 to T+14

the audit is prepared three weeks ahead.

T-21

planning + scope

Coordination with your Responsable Sanitario or compliance lead. Scope defined (equipment, period, applicable regulation). Checklist generated.

T-14

gap closure

Retroactive period review: excursions documented, corrective actions verified, equipment with full coverage.

T-7

pack assembly

Time series + events + NOM report + signatures. Cross-validation by our team. Probe calibration confirmed and current.

T-3

pack delivery

Signed PDF delivered to your Responsable Sanitario. Copy in your dashboard. Companion document explaining each logged excursion.

T0

audit day · standby support

AstreaIoT specialist available by WhatsApp or phone during the visit. Auditor questions answered in real time with drill-down to the exact event.

T+14

closure + lessons

Findings review. Checklist and playbook updated for the next audit. Corrective actions with owner + date.

applies to planned audits (COFEPRIS, SCT, STPS) · surprise audits are handled with the current-month pack

>./privacidad --lfpdppp·IV · customer data

privacy and data ownership · four principles.

01

your data is yours

Your chain operational data (temperatures, energy, events) belongs to your company. No resale, no cross-customer aggregation, no use for third-party model training.

02

role-based access + log

Per-organization roles: admin, operator, auditor, read-only. Every action logged and queryable. Sessions expire. MFA available for administrators.

03

encryption in transit and at rest

TLS for all communications from gateway to dashboard. Data at rest encrypted at disk level. Keys rotated per schedule.

04

ARCO rights + portability

Privacy notice aligned to LFPDPPP. Handling of Access, Rectification, Cancellation, Opposition requests. CSV/JSON export of historic data at contract end.

>./cumplimiento --quote

the next audit isn't an event · it's a report.

We'll show you the evidence pack with your data in less than 30 days from install. No presentations — your operation, your regulation, your report.