Unlock your product data — without rebuilding your backend.
DataBridge gives manufacturers a secure, standardised layer for exposing product-generated data to owners, service providers and third-party applications. Connect the systems you already run, and get ownership, consent, scoped access, revocation and audit records as infrastructure.
- Connectors
- REST · Postgres · Webhook · CSV
- Export formats
- CSV and JSON
- Access model
- Scoped, expiring grants
- Records
- Append-only consent and audit
Connected products generate data that nobody can safely share
The engineering is rarely the hard part. The hard part is proving who is entitled to what, for how long, and being able to show it afterwards.
The data exists, but nobody can reach it
Telemetry lands in a database, a broker or a vendor cloud that was never designed to be opened to customers or their service providers.
Every request becomes a project
A fleet operator asks for their own machine data and it turns into a CSV someone assembles by hand, an FTP drop, and a support thread.
Access with no way back
Once an integrator has a database credential, there is no scope, no expiry, and no record of what they read.
How it works
Four steps from an existing backend to a governed access layer.
- 01
Connect what you already run
Point DataBridge at your REST endpoint, PostgreSQL replica or event stream. Nothing on the device changes.
- 02
Map your payload once
Translate temp1 into temperature in °C, classified as operational data. The mapping is the contract everything else reads.
- 03
Owners get their data
Each product owner signs in, sees the units they own, inspects live values and exports history as CSV or JSON.
- 04
Third parties get scoped access
A repair service requests diagnostic data for 30 days. The owner approves. The API enforces it, and revocation takes effect immediately.
What your system already sends
{
"machine": "ABC123",
"temp1": 71.4,
"runhrs": 4421,
"err": "0"
}What DataBridge exposes
machinedevice.serialNumberidentifiertemp1temperature°Coperationalrunhrsoperating_hourshmaintenanceerralarm_codediagnostic
One layer, three parties, one set of rules
For manufacturers
- One access layer for every product line, without touching device firmware
- Ownership recorded as history, so transfers and resales stay traceable
- Granular data categories with per-field sensitivity and sharing policy
- Audit trail and evidence exports for internal review and customer questions
For product owners
- A portal that shows the machines you own and the data they produce
- Machine-readable export in CSV and JSON, on demand
- See exactly which third parties hold access, and to what
- Withdraw access at any time, with immediate effect
For third parties
- A documented REST API with scoped, expiring credentials
- Access requests that state purpose, data categories and duration
- Predictable errors and pagination built for unattended integrations
- Webhooks for ownership changes, grants and revocations
Built for the integrator
A versioned REST API with scoped keys, predictable pagination and machine-readable errors. Keys are hashed at rest, shown once, and can carry an expiry.
- Bearer authentication with per-key scopes
- Consistent list envelopes and offset pagination
- Stable error codes with a request id on every response
- Rate limit headers on every call
- Signed webhooks with replay-resistant signatures
Read a device’s latest values
curl https://api.databridge.eu/v1/devices/dev_01J8.../data/latest \ -H "Authorization: Bearer db_live_..."
Response
{
"object": "list",
"data": [
{ "key": "spindle_temperature", "value": 42.3,
"unit": "°C", "category": "operational",
"timestamp": "2026-08-16T09:14:02Z" },
{ "key": "operating_hours", "value": 4219,
"unit": "h", "category": "maintenance",
"timestamp": "2026-08-16T09:14:02Z" }
]
}Connectors
Planned connectors are labelled as such in the product. Nothing is shown as working before it is.
- REST API· Available
- Webhook push· Available
- PostgreSQL· Available
- CSV import· Available
- MySQL· Planned
- MQTT· Planned
Security is the product
A data-access layer that leaks is worse than no data-access layer. These are architectural properties, not settings.
Tenant isolation by construction
Every record carries its organisation, every query is scoped server-side, and no tenant identifier is ever accepted from the client.
Secrets that cannot be read back
API keys are stored as keyed digests and shown once. Data-source credentials are encrypted with AES-256-GCM and never returned to a browser.
Access that expires and revokes
Grants carry a scope list, a category list and a validity window. Revocation is immediate because authorisation is checked per request.
An append-only record
Consent and audit events are written once. The application exposes no path that edits or deletes them.
Support for data-access obligations
The EU Data Act obliges many manufacturers of connected products to make product-generated data available to users and, at the user’s request, to third parties. DataBridge implements the mechanisms those obligations typically call for: a declared data schema, owner access, machine-readable export, third-party authorisation with purpose and duration, revocation, and an append-only record of what happened.
DataBridge does not certify compliance and does not provide legal advice. Our readiness score measures how completely the technical mechanisms are configured in your workspace — nothing more. Assess your legal obligations with qualified counsel.
Plans
Packaging is defined by device count, integration count and retention. Pricing is agreed per organisation — get in touch and we will scope it with you.
Starter
One product line, one integration, the full access model.
- Connected devices250
- Product lines2
- Data sources1
- Telemetry retention (days)90
- Outbound webhooks—
- Custom data categories—
- SSO / SAML readiness—
Email support
Pro
Most commonMultiple product lines and production integrations.
- Connected devices5,000
- Product lines10
- Data sources5
- Telemetry retention (days)365
- Outbound webhooksIncluded
- Custom data categoriesIncluded
- SSO / SAML readiness—
Priority email support
Business
Full fleet coverage with long retention and partner ecosystems.
- Connected devices50,000
- Product lines50
- Data sources25
- Telemetry retention (days)1,095
- Outbound webhooksIncluded
- Custom data categoriesIncluded
- SSO / SAML readinessIncluded
Named contact, 8×5 response targets
Enterprise
Unlimited scale, bespoke deployment and contractual guarantees.
- Connected devicesUnlimited
- Product linesUnlimited
- Data sourcesUnlimited
- Telemetry retention (days)Unlimited
- Outbound webhooksIncluded
- Custom data categoriesIncluded
- SSO / SAML readinessIncluded
Dedicated support and onboarding engineer
Billing is not enabled in this release; plans and limits are enforced in the product, payment is handled outside it.
Questions
Do we have to change our devices or firmware?+
No. DataBridge connects to the systems that already receive your product data. If telemetry reaches a database, an API or a broker today, it can reach DataBridge without touching the fleet.
Does this make us compliant with the EU Data Act?+
No software can do that, and we will not claim otherwise. DataBridge implements the technical mechanisms that data-access obligations typically require — owner access, machine-readable export, third-party authorisation, revocation, audit records. Whether your organisation meets its legal obligations depends on your products, contracts and circumstances, and should be assessed with qualified legal counsel.
Who decides what a third party can see?+
The product owner. A third party can request access, stating purpose, data categories and duration. Nothing is readable until the owner approves, and the owner can narrow the request before approving or withdraw it afterwards.
What happens to data we already hold?+
It stays where it is. DataBridge normalises and indexes what it ingests for access purposes; it is an access layer, not a replacement for your historian or data platform.
Can we run this in our own environment?+
The application is a standard Node.js service backed by PostgreSQL and deploys to your own infrastructure or a managed platform. See the deployment documentation in the repository.
Make your connected products accessible.
Create a workspace, connect a data source, and see your fleet’s data flowing through a governed access layer.