Data protection
Customer data is encrypted in transit and at rest.
Trust & Security
Nothing on this page matches your search.
Overview
TransGrid Energy builds energy infrastructure and control platforms used by critical infrastructure operators. This page describes the controls we use to protect customer data and keep our platforms available, and how to request security documentation or report a concern.
Compliance
UL 3115 — EnergyFluoCertified
UL 2900-1 — DERMS platformCertified
SOC 2Audit underwayExpected January 2027
Security commitments
How we protect your data and our platforms
Specific service commitments, including availability and support terms, are set out in each customer agreement.
Access control
Access to systems is limited by role, requires multi-factor authentication, and is reviewed regularly.
Monitoring and detection
We log and monitor system activity for suspicious behavior and investigate alerts.
Availability and resilience
Our platforms, including EnergyFluo, are backed up and covered by documented recovery procedures. Availability commitments are defined in customer agreements.
People and training
Employees complete security awareness training and acknowledge our security policies.
Vendor management
Third-party providers that handle customer data are reviewed for security before onboarding and periodically after that.
Incident notification
If a security incident affects customer data, we will notify affected customers within the timeframe set out in their agreement.
Documents
Request our security documentation
Customers and prospects can request our security documentation. Sensitive materials, including our SOC 2 report once issued, are shared under NDA.
Available documents
- SOC 2 report (when available)
- Security overview
- Security questionnaire response
Request security documentation
Request received.
Thank you. We will review your request and follow up by email. Sensitive materials are shared under NDA.
Report a concern
How to report a security, service or compliance issue
Customers, partners, researchers and members of the public can report security, compliance or service concerns. Every report is logged and reviewed.
Security vulnerability or incident
Suspected vulnerabilities, unauthorized access or data exposure.
security@transgridenergy.comService or outage issue
Problems with EnergyFluo or other platform availability or performance.
support@transgridenergy.comCompliance or ethics concern
Possible violations of law, policy or our code of conduct.
compliance@transgridenergy.comWhat happens next
We acknowledge your report within the following time frames depending on the severity of the event:
| Incident Classification | Classification Definition | Time to Acknowledge Report |
|---|---|---|
| P1 – Critical | Full outage or severe degradation of a core function. Major customer, safety, financial or compliance impact. No workaround. | 15 minutes |
| P2 – High | Major function significantly degraded or a subset of users or sites affected. A workaround exists but is limited or costly. | 1 hour |
| P3 – Medium | Minor function impaired. Limited impact, reasonable workaround available. | 4 business hours |
| P4 – Low | Cosmetic issue, informational request, or enhancement. No operational impact. | 2 business days |
- The responsible team logs, investigates and resolves the issue.
- We follow up with you on the outcome where appropriate.
Responsible disclosure
If you believe you have found a vulnerability, email the details to security@transgridenergy.com. Please allow us reasonable time to investigate and remediate before any public disclosure. Do not access, modify or exfiltrate data that is not yours.
Related policies
About TransGrid Energy
TransGrid Energy is a wholly-owned subsidiary of Hanwha FutureProof, whose mission is to invest in and operate assets across the USA that drive the shift toward a more sustainable future. We are a leading renewable asset owner and operator, delivering reliable, clean energy solutions to our customers.