Security Policy

TerraAqua controllers use a unique serial number, claim code and device secret. The cloud update system verifies controller identity before update checks and status reports.

Security updates

TerraAqua will publish security and reliability updates through the controller update system. The minimum intended security support period is 5 years from retail purchase, subject to final policy approval.

No universal default passwords

Retail controllers must not ship with a universal remote-access password. Each controller must be provisioned with its own identity before customer use.