
Data centres & AI compute
Above 100 kW a rack, liquid cooling isn't an upgrade — it's the design. Lose flow and the silicon throttles before a human reads the alarm.
Your chillers, CDUs and air handlers are physical machines, and your BMS, DCIM and controls already watch them. Running the response still happens outside all of it, on a phone at 03:14. This layer reads the same equipment and closes that loop.
Reads physical equipment through the systems you already run. Takes no control authority over any of it.
of organisations hit by a major outage believe better process would have prevented it
rack density in a decade — roughly 5 kW to over 100 kW per rack
setpoints, valves or start commands it writes — read-only on the plant, by design
It reads what your building systems see, works out what is actually wrong, and runs the repair through to proof.
BMS, BAS, DCIM, controls and sensors read into one place. Read-only — it takes no control authority and cannot change a setpoint.
Fifty alarms from one failing pump collapse into one incident, with one root cause, one owner and one clock.
The certified and cleared technician, the approved procedure, and telemetry confirming the condition genuinely cleared before anything closes.
Fifty alarms just came in. What is actually wrong?
All fifty are one incident. CDU-2E is losing differential pressure, and the two racks behind it are already above their class limit.
| Asset | Reading | State |
|---|---|---|
| CDU-2E | Δp falling | Root cause |
| RACK-14 | 31.4 °C | Above class |
| RACK-16 | 30.8 °C | Above class |
Building HVAC software was designed for comfort — schedules, setpoints, tenant complaints. A data centre, a hospital, a fab runs cooling as infrastructure. Same equipment, entirely different job.
We tell you what sits downstream of it, and how many minutes of margin are left before it matters.
We find the one who is certified, cleared, on shift and permitted by the manufacturer to open that unit.
We close when the telemetry says the condition cleared — and reopen it when the telemetry disagrees.
Your devices already produce the signal. Your teams already do the work. Nothing has ever owned the layer between them — so it happens on a phone call at 03:14.
Every decision the layer makes begins at a piece of equipment — a compressor, a pump, a coil, a valve — and ends with a person who put their hands on it. It reads the plant. It does not command it.
Read-only on the plant. It reads equipment state and writes work to people — never a setpoint, a valve position or a start command. Those write scopes are not requested and not available.
Equipment classes and protocols are proven one site at a time with design partners. We name an integration once it is running on real plant, not before.
The equipment is ordinary. The tolerance, the redundancy and the paperwork around it are not.

Above 100 kW a rack, liquid cooling isn't an upgrade — it's the design. Lose flow and the silicon throttles before a human reads the alarm.
Different standards, different consequences, one identical gap between the alarm and the qualified hand.
The questions that come up in every first conversation, including the ones that are really objections.
Mission-critical HVAC is cooling for facilities where a temperature excursion causes loss rather than discomfort — data centres, hospitals, laboratories, cleanrooms and process manufacturing. The equipment resembles commercial HVAC. The tolerance, the redundancy and the governance around it do not.
Data centre HVAC is designed with redundancy, so a single failure rarely reads as an outage until the margin is already gone. Rack densities above 100 kW require liquid cooling loops, CDUs and rear-door heat exchangers rather than air alone. Access is governed by procedures and clearances that decide who may touch the equipment at all.
It connects to the physical equipment — chillers, CDUs, CRAH and CRAC units, cooling towers, pumps, valves and the sensors on them — through the software already wired to that plant. Live state arrives by way of the BMS, BAS, DCIM, controls, historians, meters and OEM gateways, and every one of those connections is read-only. Equipment classes and protocols are proven one site at a time with design partners, which is why none is named here as supported yet.
A BMS controls and observes equipment, but it does not run the response. It does not know which technician holds the OEM authorisation for that CDU, whether the required MOP was approved, or whether the repair actually cleared the condition. That work happens outside it, on a phone.
A horizontal CMMS receives every alarm as its own event, so one failing pump can open fifty work orders for fifty downstream sensors. This layer holds the cooling chain, so it correlates those fifty signals into one root cause and gates dispatch on live certification and clearance rather than attaching a PDF checklist.
No — it acts on the condition the equipment is in now, not on a forecast of one. Predictive tools score the probability of a future failure; this layer takes a live physical condition, works out what sits downstream of it and how much thermal margin is left, and runs the qualified response through to verified closure. Failure prediction is a research direction here rather than a claim, and it will be described as one when a design partner's telemetry shows it worked.
You could, and integrators charge accordingly. Both ship the generic IoT-alert-to-work-order pattern as building blocks, both are designed to manage internal teams inside one tenant, and neither understands cooling topology out of the box. The hard parts are correlation across a thermal chain and orchestration between a facility owner and an outside contractor on separate systems.
It is field service software — a field operating system for mission-critical cooling. It runs the dispatch, the procedure, the technician and the closure, which means it replaces the platform doing that work today rather than syncing with it. What it does not replace is the observation layer: your BMS, BAS, DCIM and controls stay where they are, and we only read them.
We are looking for a small number of design partners running critical cooling at real scale. This is the whole commitment.
We map one cooling system with your team — assets, dependencies, alarm sources. Nothing connected. A whiteboard exercise that produces a model.
A read-only connection to one alarm feed, in a DMZ or against a historian. It writes nothing, anywhere.
We replay your last 90 days of alarms and show what correlation would have caught, missed, and got wrong.
Shadow mode on live alarms. Your team compares its call to ours on every incident, then decides whether this was worth the time.