All Products
Comercial and Small Industry license
Multiple sites. A real team. Still your server, still your data.
SunGrid Portal Commercial is the self-hosted energy monitoring and automation platform for installers, service companies and operators who run more than one system and answer to more than one customer. It runs on hardware you own — a mini PC, a NUC, a rack VM — and adds the three things a single-site licence cannot give you: an engineering-grade Advanced dashboard, teams with real on-call escalation, and fleet analytics with a client-ready PDF report.
No vendor cloud. No per-site SaaS fee. No customer telemetry sitting in someone else's data centre.
What Commercial unlocks
Advanced dashboard mode — the whole site on one canvas
Classic mode draws one device against a house, camper or boat scene. Advanced mode replaces it with a technical power-flow schematic and aggregates every portal at the site into a single picture: no per-device tabs to click through, grid metrics combined across gateways, AC output summed across shared portals, and all battery banks, solar chargers, PV inverters and EV chargers merged into unified blocks. Built for installations with two inverters, three gateways and a shared AC bus — where per-device tabs stop being useful. Selected per user, per location, so a technician and a customer can look at the same system in the view that suits them.
Teams, installation groups and on-call — PagerDuty semantics, self-hosted
Build teams with members and per-member skill tags (inverter, battery, comms, whatever you dispatch on). Bundle sites into installation groups and link the teams responsible for them.
Then put people on a real on-call schedule: place team or individual blocks on a timeline, with repeat intervals for weekly rotations and optional coverage windows restricted by weekday and clock hours. Blocks may overlap — an individual block overrides a team block, and on equal priority the newest block wins. A team block puts the whole team on-call: everyone is notified and whoever holds the right skill responds. A manually pinned on-call person is the last-resort fallback when no block is active.
Escalation is automatic and runs server-side. An incident opened without an assignee is routed to whoever is on-call for that site's group, and the notification fans out to every on-call member. The first acknowledgement stops escalation for everyone. A background scanner sweeps every 60 seconds: any unacknowledged incident older than 15 minutes is bumped a level and reassigned to the next target in the escalation chain — remaining team members first, then lower-priority active blocks, then the manual pointer — through five levels, notifying the new owner each time. Acknowledging moves the ticket to in progress and takes it out of the loop.
Fleet analytics — the operational picture across every site you manage
One screen that answers "what needs a human today":
- Attention board. Overdue tasks and open incidents per site, maintenance gaps (sites whose last service is older than your threshold, or that have never been serviced), and credentials about to expire — each row jumping straight into the note.
- Flow & SLA. Created versus closed per day, live backlog reconstructed over the window, and per note type: MTTR, median time-to-resolve, acknowledged count and MTTA.
- Workload. Open, overdue and closed-in-window per assignee, unassigned open tickets, a due-soon lookahead, and every ticket currently sitting at an escalation level with how long it has been there.
- On-call coverage. Who is on right now for each group, whether that came from the schedule or a manual pin, how many people are on the Level-0 team — and, critically, which sites are covered by nobody at all.
- Telemetry rule health. Which automatic rules actually fired over the window, and which ones are noisy enough to be retuned.
- Activity heatmap and storage. Event density over 7, 30, 90 or 365 days, plus attachment storage per site with file counts.
Export it as CSV, or generate a branded landscape A4 PDF fleet report — attention, flow, workload, on-call, rule health, full ticket detail with embedded photos, and an appendix. The document a customer or an asset owner actually accepts as a service report.
Every aggregation is scoped to what the caller may see: admins and installers see the whole fleet, other roles only the sites assigned to them. Secret and encrypted notes are excluded for anyone not allowed to read them, and credential-expiry data is admin-only.
The platform underneath
Live monitoring
Animated real-time power flow streamed over a persistent WebSocket with sub-second updates: solar, battery, grid, AC and DC loads, state of charge, temperatures, tank levels — light or dark theme, Classic or Advanced view, any number of sites behind one location switcher.
Your own dashboards
A full widget builder with time-series charts, correlation plots, live-value cards and filtered status lists, bound to any metric in your system. Describe the widget you want in plain language and let the AI assistant assemble it.
Visual automations — no code
Drag-and-drop rule builder on an infinite canvas: sensor nodes, threshold conditions with hysteresis (no relay flapping), clock and timer gates, latches, and full boolean logic (AND, OR, XOR, NOT, NAND, NOR, XNOR). Actions on inverters, Tuya devices and Sonoff switches. Dry-run any rule before arming it. Rules carry safe-state behaviour, crash recovery, automatic retry with verification, and versioned backup/restore.
Dynamic ESS — battery optimisation that pays for itself
A forecast-driven scheduler that plans each battery hour by hour against the real tariff of that site. Tariff calendars with seasons, separate weekday / Saturday / Sunday dials and peak / standard / off-peak pricing, in the installation's own timezone and currency. Strategies: self-consumption, solar export, or full ESS. The optimiser drives charge and discharge through operating mode and state-of-charge thresholds and reads every write back to confirm the device accepted it. Inverter settings are snapshotted before DESS activates and restored automatically when you turn it off.
Telemetry rules that open tickets by themselves
Watch any metric and auto-open a maintenance, inspection, incident, observation or task note when it crosses a threshold — numeric comparisons, text match, changed, or stale-data detection, with templated titles and bodies. Deduplication keeps one open ticket per rule and appends each new occurrence to it instead of flooding your queue. Those tickets then feed straight into on-call assignment and the SLA numbers above.
Alerts that reach the right person
Grid up/down, low or high SoC, battery over-temperature, generator start/stop, tank level, inverter state changes, BMS limit changes, device alarms, gateway disconnects, escalations. In-app pop-ups with full history, plus email, WhatsApp, Telegram, Discord and Microsoft Teams — routed per event type and delivered per user, so on-call gets the page and everyone else does not.
Notes, tickets and asset records
Incidents, tasks, maintenance, inspections, observations and credentials tied to each site, with attachments, linked assets, due dates, assignees and AI summarisation of long threads.
Solar forecasting and weather
Hourly irradiation and PV-production forecasts from the EU PVGIS dataset, computed per solar string using real azimuth and tilt, paired with live weather.
An AI assistant that knows your systems
Ask in Romanian, English or German. It reads your live topics and metric catalog, streams answers token by token, and shows every tool it calls. Anything that would change device state stops at a confirmation card first — the AI never actuates without an explicit yes.
Hardware you already install
Victron Cerbo GX over MQTT. Modbus inverters over TCP, RTU, RTU-over-TCP and Solarman — with presets for Huawei SUN2000, Fronius GEN24, Atess HPS, Deye, Solis and WAGO. Tuya smart devices over cloud or pure LAN. Sonoff / eWeLink switches.
Mobile app included
Native Android and iOS app — dashboard, notes and tickets, automations, telemetry rules, fleet analytics and Dynamic ESS from a phone or tablet in the field. Paired to your server with a one-time token, no third-party account.
Three languages, one interface
Full Romanian, English and German throughout — including the notification text delivered to your technicians' phones.
Security — engineered in, not bolted on
-
FIPS 140-3 validated cryptography. Production images are compiled against validated cryptographic modules (Go with
GOFIPS140andfips140=on; Node built against an OpenSSL FIPS module). Every service exposes a live/fipszendpoint so you can verify it yourself, at runtime, on your own box — and show it to a client's auditor. - Encrypted at rest, everywhere it matters. AES-256-GCM envelope encryption with a versioned keyring and key rotation covers device credentials, user PII, audit fields, energy-storage policies, GPS coordinates and cached payloads. Ciphertext is bound to its context, so a stolen blob cannot be replayed into a different column.
- Mutual TLS between every component. Services authenticate each other with client certificates — including connections to PostgreSQL, Redis and the metrics store. Internal APIs fail closed.
- Modern authentication. WebAuthn / FIDO2 passkeys for passwordless login, TOTP authenticator 2FA, email 2FA, short-lived JWTs with refresh-token rotation and reuse detection, per-device session tracking with remote revocation, rate limiting, account lockout, and a login path hardened against user-enumeration timing attacks.
- Role-based access with per-site scoping. Admin, installer and user roles; a technician sees only the installations assigned to them, and that scoping is enforced in every aggregation — including fleet analytics, not just in the UI. Licence tiers themselves are enforced server-side on the API, not hidden client-side.
- A complete audit trail. Every state-changing API call across every service is recorded with encrypted actor IP, user agent and request details, and configurable retention. (The audit log viewer UI is an Industrial-tier feature — the trail itself is always recorded.)
- Hardened, minimal images. Distroless production containers built from source, cryptographically signed, and continuously scanned for CVEs.
Data sovereignty — the part nobody else will put in writing
Your customers' energy data never leaves your network.
Every reading from every inverter, every battery cycle, every kWh imported or exported is written to a PostgreSQL and Prometheus instance running on your machine, on your infrastructure. There is no ingest pipeline to a vendor cloud, because there is no vendor cloud. When a client asks where their production data is stored, the answer is a server you can point at.
The only mandatory outbound call is the licence heartbeat, and it carries a hardware fingerprint, hostname, platform, hardware specs, public IP, software version and container image digests — no telemetry, no energy data, no personal data, no note or ticket contents. The licence token is valid for 24 hours and cached locally encrypted, so an internet outage never stops your operation. Solar forecasting sends coordinates only, weather sends a location, and both can be switched off. Notification channels carry only the alerts you configured. Tuya and Sonoff clouds are touched only if you choose cloud devices — LAN mode is available.
AI that stays home. The assistant ships configured for local inference — Ollama or LM Studio on your own hardware. Your prompts, your metric names, your clients' system topologies never touch a third-party model. Cloud providers (Gemini, Claude) are available if you choose them, and never enabled by default.
No lock-in. Full configuration export and import. It is your PostgreSQL database — dump it, back it up, move it to a new machine, hand a client their own instance, walk away with everything. Nothing is held hostage in someone else's account.
Included in the Commercial licence
- ✔ Advanced dashboard mode — technical power-flow schematic, all devices at a site aggregated into one view
- ✔ Teams and installation groups with per-member skill tags
- ✔ On-call scheduling with automatic escalation — team and user blocks, rotations, coverage windows, five escalation levels
- ✔ Fleet analytics — attention board, SLA and MTTR, workload, on-call coverage, rule health, activity and storage
- ✔ Branded PDF fleet report and CSV export
- ✔ Classic dashboard — house / camper / boat, live power flow
- ✔ Custom widget dashboard + AI widget builder
- ✔ Historical charts and energy statistics (90-day high-resolution metrics, long-term history in your database)
- ✔ Solar forecasting (PVGIS) and weather
- ✔ Visual automation builder with simulation, backup and restore
- ✔ Dynamic ESS battery optimisation with full tariff calendar editor
- ✔ Telemetry rules and multi-channel notifications
- ✔ Notes, tickets and incident tracking with attachments
- ✔ AI assistant (local-first)
- ✔ MQTT, Modbus, Tuya and Sonoff integrations
- ✔ Unlimited locations, users, roles and per-site access scoping
- ✔ Android + iOS mobile app
- ✔ Romanian / English / German
Not included — available on Industrial
- ✖ Industrial single-line diagram dashboard (PV arrays, DC buses, inverter banks, transformers, MV bus, point of interconnection)
- ✖ Multi-site Installations map board with fleet-wide aggregate metrics
- ✖ System Design graphical topology editor and installer-access delegation
- ✖ Audit log viewer UI (the audit trail is still recorded on every tier)
Upgrading is a licence change — no reinstall, no data migration. Your new capabilities appear within 30 seconds.
Run a fleet like an operator. Own the data like an owner.