>./cumplimiento·designed for audits

operational compliance · built for audits.

COFEPRIS, SICT, STPS, SEMARNAT. AstreaIoT logs temperature, humidity, energy, and critical events with timestamp and signature, for the retention each regulation demands — the evidence your Responsable Sanitario hands the inspector. We are the monitoring infrastructure, not the verification body.

request a quote →see the evidence pack
>./scope --honest·before going further · what AstreaIoT is and is NOT

four roles in the chain · only one is ours.

Complying with COFEPRIS / NOMs / SICT / STPS / SEMARNAT in Mexico involves four distinct actors. AstreaIoT is one of them — the continuous-monitoring infrastructure. The other three are legal responsibilities of the client or external accredited bodies. This should be clear before any quote.

rolewho does itwhat they dois it AstreaIoT?
Responsable Sanitario
client's employee or contractor · current professional license (pharmacist · chemist · sanitary engineer)
signs logs · answers to COFEPRIS · legal responsibility for the site
NO · your personnel
Verification Unit (Unidad Verificadora)
EMA-accredited body (Entidad Mexicana de Acreditación)
issues conformity opinions when your operation needs one from an accredited verification unit
NO · external partner · see /partners
Calibration laboratory
ISO 17025 accredited laboratory · CENAM traceability
calibrates probes with traceable certificate · 12-24 month validity by use
NO · external partner · see /partners
COFEPRIS / inspecting authority
designated federal inspector
conducts on-site inspection · reviews evidence · sanctions if applicable
NO · government function
Monitoring infrastructure
AstreaIoT
continuous sensors + WhatsApp alerts + immutable timestamped logs + NOM-formatted reports + engineer support on audit day
YES · this is us

// The honest promise: AstreaIoT doesn't "do" your audit · it gives you the continuous evidence your Responsable Sanitario presents and that passes inspector scrutiny. If your operation needs an opinion from an accredited verification unit, we introduce you to one.

>./normas --cobertura·I · twenty-five regulatory frameworks · 10 clusters · 56 industries

the regulations that actually matter in your operation.

NOM-251-SSA1-2009food · COFEPRIS

cold chain for food processing

Good Hygiene Practices in the food chain. Per-chamber temperature, humidity, door cycles, pests. Applies to supermarkets, restaurants, foodservice, 3PL.

magnitudes: T° · RH · doors · currentretention: product life + 1 year
FEUM · NOM-059 · NOM-036pharma · COFEPRIS

medicine and vaccine storage

Temperature of every refrigerator and storeroom, time-stamped, in the format your inspection asks for: FEUM Supplement in pharmacies, NOM-059-SSA1-2015 in warehouses and distribution centers, NOM-036-SSA2-2012 for vaccines. Your Responsable Sanitario presents it.

magnitudes: T° · RH · current · doorsretention: 5 years
NOM-251 · NOM-059 (transport)refrigerated transport · SICT

refrigerated cargo transport

Per-vehicle temperature + GPS for refrigerated tankers and boxes in transit. Load-vs-unload reconciliation. Applies to 3PL, food and pharma transport.

magnitudes: T° · GPS · doorsretention: 5 years
NOM-036-SSA2-2012clinical record · COFEPRIS

vaccine & biologic cold chain

Temperature for immunization refrigerators and freezers. Zero tolerable excursions. Applies to hospitals, clinics, vaccination centers.

magnitudes: T° · alarms · doorsretention: lot life + 2 years
NOM-001-SEDE-2012electrical installations · CFE

electrical protection & submetering

Switchboards with continuous connection and balance monitoring. Per-circuit submetering identifies abnormal consumption + prevents electrical incidents.

magnitudes: current · voltage · power factorretention: 3 years
NOM-010-STPS-2014chemical substances · STPS

hazardous-chemical safety

Gas + vapor detection in storage and processing. Indoor air quality measured and reported. Applies to chemical, pharma, food.

magnitudes: CO₂ · VOC · particulatesretention: 3 years
NOM-016-SSA3-2012hospitals · COFEPRIS

hospital infrastructure

Blood bank, ultra-cold, medical gas and hospital critical areas: continuous monitoring as evidence for your sanitary inspection. Applies to hospitals.

magnitudes: T° · pressure · access · immutable logretention: product life + 1 year
NOM-007-SSA3-2011clinical labs · COFEPRIS

clinical lab organization + operation

-80 °C ultra-low freezers, refrigerated reagents, incubators, HEPA in cleanrooms. Traceability for EMA accreditation. Sample chain of custody.

magnitudes: T° · access · alarmsretention: lot life + current accreditation
NOM-013-SSA2-2015dental · COFEPRIS

oral disease prevention + treatment

Per-chair autoclave validated per cycle, calibrated ultrasonics, IAQ in offices and the X-ray room (radiation protection stays with your specialist advisor). Applies to formal dental chains.

magnitudes: autoclave T° · cycles · IAQretention: 5 years
SENASICA · veterinary vaccinesveterinary · SADER / SENASICA

veterinary services establishments + animal medications

Veterinary vaccine refrigerator + -20°C controlled medications, surgical autoclaves, kennel IAQ, anesthesia gases. Applies to independent veterinary clinics and chains.

magnitudes: vaccine T° · anesthesia gases · IAQretention: 5 years
Laboratory biosafetyresearch labs · biosafety committee

biosecurity in university laboratories

Biosecurity autoclaves private universities with med school, ultra-cold research labs -80°C, auditable access, research-integrity logs. Applies to private universities + research centers.

magnitudes: autoclave T° · ultra-cold · accessretention: program life + 5 years
INAH · INBAL · LFPDPPPcultural heritage · INAH + INBAL

preservation of cultural and artistic heritage

Per-gallery T+RH 20-22°C / 45-55% RH conservation spec, IAQ with PM2.5, structural tilt CDMX post-2017, auditable collection access, visitor counting. Applies to museums + heritage sites.

magnitudes: T° · RH · tilt · access · PM2.5retention: museum life · permanent for INAH audit
NOM-006-SCFI-2012 · CRTtequila · CRT (Denomination of Origin)

tequila production process

Agave cooking ovens 90-100°C × 24h, fermentation 30-35°C, barrel cellar T+RH, CRT chain of custody. Applies to CRT-registered distilleries in Jalisco DO + 4 states.

magnitudes: oven T° · fermentation · cellar T+RH · accessretention: permanent · recurring CRT audit
NOM-070-SCFI-2016 · CRMmezcal · CRM (Denomination of Origin)

mezcal production process

Traditional palenque pit-oven smoke-roasting, 4-8 day fermentation, barrels, palenque smoke + CO IAQ, CRM chain of custody. Respects palenquero tradition. Applies to CRM palenques in Oaxaca + 6 states.

magnitudes: pit-oven T° · fermentation · smoke + CO IAQretention: permanent · recurring CRM audit
NOM-142-SSA1-SCFI-2014beer · COFEPRIS

bottled alcoholic beverages

Precise 18-22°C beer fermentation, CO₂ life-safety in tank cellar, cold storage for kegs + hops. Applies to ACERMEX craft breweries + commercial.

magnitudes: fermentation T° · CO₂ · cold storage T°retention: product life + 1 year
NOM-187-SSA1-SCFI-2002tortilla · COFEPRIS

nixtamalized masa products

Gas LP comal/oven 200-260°C, masa cold storage 4-7°C, CFE GDMTO sub-metering, stored-grain humidity for aflatoxin prevention. Applies to mid-format industrial tortillerías.

magnitudes: comal T° · masa T° · grain warehouse RH · LP gasretention: product life + 1 year
NOM-243-SSA1-2010dairy · COFEPRIS

dairy products and derivatives

HTST pasteurization 72-85°C × 15s, ice cream ultra-cold ripening -25/-30°C, refrigerated ingredient cold storage. Applies to industrial ice cream + dairy producers.

magnitudes: pasteurization T° · ultra-cold · ingredient T°retention: 5 years
NOM-213-SSA1-2018processed meats · COFEPRIS

processed meat products

Smokehouse 60-90°C cold smoke / 80-120°C hot smoke, weeks-long curing room 10-15°C / 65-80% RH, finished cold storage. Applies to industrial + boutique smoked meats and charcuterie.

magnitudes: smokehouse T° · T+RH curing · cold storage T° · smoke IAQretention: product life + 1 year
Raw milk · SENASICA / buyerdairy ranch · tank

raw-milk cold chain

Tank between 2 and 4 °C, minute by minute, with a submersible probe: the proof for your buyer that the milk was cooled and stayed cold until pickup. Milking measured and well pump watched.

magnitudes: tank T° · milking · pump currentretention: lot life + 6 months
NOM-188-SSA1-2002aflatoxins · COFEPRIS + USDA + FDA

aflatoxin prevention in stored grain

T+RH inside silo, smart ventilation via controller when internal conditions require, ultrasonic level sensor. Pre-emptive alert avoids harvest loss from aflatoxins. Applies to grain silos + tortillerías + flour mills.

magnitudes: silo T° + RH · silo CO₂ · levelretention: grain life + 2 years
AMECAFE · SCAcoffee · AMECAFE + voluntary SCA

coffee processing + Specialty export

Fermentation pH 4.5-6, drying patio T+H, 180-240°C roaster, green bean cold storage 15-18°C, precise cupping room. AMECAFE + voluntary SCA backed.

magnitudes: fermentation pH · drying T° · roasting T° · warehouse T+RHretention: lot life + 2 years · permanent for SCA
NOM-015-STPS-2001thermal stress · STPS

elevated thermal conditions at work

Continuous temperature and humidity in the hot zones of your plant: the signal for your safety lead to measure the WBGT index NOM-015-STPS asks for where needed. The sensor triggers the review; the assessment is yours.

magnitudes: T° · RHretention: 5 years
OIV · LEED · BAPinternational voluntary · OIV + LEED + BAP

international voluntary standards

OIV wineries (traceability + cupping), LEED energy / water / waste sustainability (universities + hospitality), BAP aquaculture (DO + pH + USDA traceability). Audit-ready snapshots for international certifications.

magnitudes: per specific standardretention: per certification + renewal
CRT · NOM-208-SCFIhomologation · CRT (telecom)

telecommunications equipment

All field hardware operating on LoRaWAN US915 bands meets Comisión Reguladora de Telecomunicaciones (CRT, formerly IFT) homologation before deployment. No unhomologated equipment on your network.

magnitudes: hardware homologationretention: equipment lifetime
LFPDPPP (2025)personal data · personal-data protection authority

personal data held by private parties

Your chain operational data belongs to you. Privacy notice, per-user-and-role access control, encryption in transit and at rest, ARCO rights handled.

magnitudes: customer dataretention: per contract + 5 years
>./pack-de-evidencia·II · what AstreaIoT delivers on audit day

the evidence pack auditors ask for.

per-equipment time series

Temperature, humidity, current, door — one chart per equipment, with NTP timestamps and shaded regulatory range.

critical events + corrective action

Each excursion logged in detail: when, how long, who handled it, what action was taken, signature of responsible party.

applicable NOM/SICT/STPS report

Template per regulation. Pre-filled with period data. Signature of Responsable Sanitario or equivalent. Print-ready or send-ready PDF.

continuity declaration

Proof that monitoring was never interrupted during the period: heartbeats, gateways, calibrated probes, battery never below threshold.

>./audit-prep --timeline·III · from T-21 to T+14

the audit is prepared three weeks ahead.

T-21

planning + scope

Coordination with your Responsable Sanitario or compliance lead. Scope defined (equipment, period, applicable regulation). Checklist generated.

T-14

gap closure

Retroactive period review: excursions documented, corrective actions verified, equipment with full coverage.

T-7

pack assembly

Time series + events + NOM report + signatures. Cross-validation by our team. Probe calibration confirmed and current.

T-3

pack delivery

Signed PDF delivered to your Responsable Sanitario. Copy in your dashboard. Companion document explaining each logged excursion. The record comes out in two clicks as one package: the PDF for the norm that applies to you and five tables — summary, excursions, corrective actions, calibrations, monitoring interruptions. What the verifier asks for, in the order they ask.

T0

audit day · standby support

AstreaIoT specialist available by WhatsApp or phone during the visit. Auditor questions answered in real time with drill-down to the exact event.

T+14

closure + lessons

Findings review. Checklist and playbook updated for the next audit. Corrective actions with owner + date.

applies to planned audits (COFEPRIS, SICT, STPS) · surprise audits are handled with the current-month pack

>./privacidad --lfpdppp·IV · customer data

privacy and data ownership · four principles.

01

your data is yours

Your chain operational data (temperatures, energy, events) belongs to your company. No resale, no cross-customer aggregation, no use for third-party model training.

02

role-based access + log

Per-organization roles: admin, operator, auditor, read-only. Every action logged and queryable. Sessions expire. MFA available for administrators.

03

encryption in transit and at rest

TLS for all communications from gateway to dashboard. Data at rest encrypted at disk level. Keys rotated per schedule.

04

ARCO rights + portability

Privacy notice aligned to LFPDPPP. Handling of Access, Rectification, Cancellation, Opposition requests. CSV export of historic data at contract end.

>./cumplimiento --quote

the next audit isn't an event · it's a report.

We'll show you the evidence pack with your data in less than 30 days from install. No presentations — your operation, your regulation, your report.