Protected communications for energy companies
Q-AUDION gives control rooms, on-call teams and field crews an encrypted channel for calls, video, messages and files, designed to support NIS2 compliance.
Critical infrastructure needs a channel that holds
Energy is one of the highly critical sectors of NIS2 (Directive (EU) 2022/2555), which covers electricity, district heating and cooling, oil, gas and hydrogen.
Operators subject to NIS2
Entities in scope must manage cybersecurity risk with appropriate technical and organisational measures, and these include how staff communicate when a situation is under stress.
Control rooms and field crews
Control-room operators, on-call engineers and field crews talk and share documents from sites with poor coverage, over mobile networks and from changing places.
Protected emergency communication
When an incident affects the usual systems, the organisation needs a separate, protected channel to coordinate the response and tell people what to do.
How Q-AUDION helps
Q-AUDION runs on Android, iOS and Windows with the same protocols on every client, and the server can be installed on your own infrastructure.
Calls and video encrypted end to end
Each call starts with a new key agreed with ML-KEM-1024 (NIST FIPS 203) and X25519, renewed during the call at most every five minutes. Voice and video are protected with AES-256-GCM, and the server routes only ciphertext.
A connection that adapts to difficult networks
Voice uses Opus at a constant 32 kbps with in-band error correction, neural packet-loss concealment and an adaptive jitter buffer. If the network blocks the direct path, the connection falls back automatically to TURN, WebSocket or MASQUE.
Group calls for coordination
Group calls are encrypted end to end on a media server that forwards only ciphertext. The group key is renewed every 30 minutes and at every change of participants.
Lost or compromised devices
Administrators can block an account, revoke a device and wipe it remotely with a signed command that the device verifies. Keys and data on the device are protected by Android Keystore (StrongBox where available), iOS Keychain or Electron safeStorage, and the app can be locked with a PIN or biometrics.
A console with protected access and an audit log
The administration console is protected with TOTP and passkeys, supports administrators limited to their own scope and keeps a hash-chained audit log.
A server in your own infrastructure
A dedicated server with its own keys and domain can be installed in the operator's data centre, following a documented procedure. The installation models are described below.
Designed to support customers' compliance with NIS2
Article 21 of NIS2 requires essential and important entities to adopt cybersecurity risk-management measures. Q-AUDION is designed to support your compliance for the communications it carries: protected voice, video and text, and a protected channel for emergencies.
Among the cybersecurity risk-management measures, Directive (EU) 2022/2555 lists, where appropriate, the use of secured voice, video and text communications and secured emergency communication systems within the entity.
Directive (EU) 2022/2555 (NIS2), Article 21(2)(j)
Data and infrastructure in the EU
Production nodes are in Italy and Finland, and no third-party TURN or media service is used. GDPR functions include signed export of account data, account deletion, phone numbers stored only as hashes and configurable retention.
Three ways to install Q-AUDION, under your control
Choose where the service runs and who operates it. Functions and protocols are the same in all three.
Dedicated EU cloud, managed by BCrypto
Operated by: BCrypto
A dedicated instance in a European Union cloud, installed and operated by BCrypto. No infrastructure for you to maintain.
Dedicated server in your data centre, managed by BCrypto
Operated by: BCrypto
A virtual or physical server in the customer's data centre, with keys, domain and apps dedicated to your organisation, operated by BCrypto.
Installed at your premises, self-managed
Operated by: The customer
Installation on your own infrastructure and independent management, with training and support from BCrypto.
Customer-held KMS: if the server is installed at the customer's site, the root key stays in the customer's infrastructure.
Services
Installation and configuration
Setting up and configuring the service for your organisation.
Operations
Updates and maintenance of the service in the models managed by BCrypto.
Training
Courses for console administrators and for app users.
Support
Technical assistance from the BCrypto team in all three models.
Try Q-AUDION in your organisation
We will send you an invitation to try Q-AUDION. For your CISO and compliance team we can also arrange a confidential technical briefing on architecture, installation models and documentation.
A summary for banks, insurers and energy companies: security, deployment models and services.
Get the Enterprise BriefCompliance documentation (DPA, DORA addendum, supplier data sheet, exit plan, SBOM and vulnerability disclosure policy) is available on request through our contact form. Request the documentation