Trust and security: certified management systems and control the owner approves.
Independent audits cover how Milvian AI runs, and a command log covers what Aqueduct does to your equipment.

Audited controls behind the company, and an audit trail behind every command.
What Milvian AI holds
- ISO/IEC 27001
Certified information security management.
- ISO 9001:2015
Certified quality management.
- SOC 2 Type 2
An independent attestation that controls operated over a period, not only on one day.

How equipment control stays safe
- Owner approval
Commands run only where control is enabled, with owner approval.
- Lockouts
New commands are blocked while an earlier one is still being acted on, which protects equipment from short cycling.
- Command history
Each command is recorded with whether it actually executed on the device.

Who sees what
Visibility follows the data model. On a shared meter, a landlord sees total consumption and each tenant's share, while a tenant signed in to the same meter sees only their own share.
Why reviewers look hard at operational systems.
of drinking water systems EPA inspected from September 2023 broke basic Safe Drinking Water Act Section 1433 requirements, it reported in May 2024.
Source: US EPA enforcement alert, 2024What certifications cover
They cover Milvian AI's own management systems and controls. They do not certify your building, your network or your compliance; your security team still reviews the deployment. Ask your Milvian AI contact for the SOC 2 Type 2 report and the security questionnaire.
sites in 21 countries run on Aqueduct.
and 9 clinics in one of India’s top hospital chains.
US airport running water intelligence on Aqueduct.
of commercial real estate under Aqueduct.
FMCG manufacturing campus.
operations run on Aqueduct.
Related
Common questions
No. Aqueduct sends nothing to a piece of equipment until the owner turns on control for it. Before that, the platform only reads data and recommends. See how replacing a BMS moves functions one at a time.
Open the device command history in Aqueduct. It lists each command, when it was sent, and whether it executed or was held by a lockout, which gives auditors and M&V reviewers a record of every change. See measurement and verification.
Aqueduct holds any second instruction until the first has finished, so a compressor is never told to start and stop in quick succession. Owners also choose which units accept commands at all, and each instruction is logged. See Smart Controls hardware.
No. A tenant login is limited to that tenant's own consumption and bills. Where several tenants draw from one meter, each one sees a percentage allocation and nothing about neighbors, while the building owner sees all of it. See tenant submetering and billing.
See Aqueduct on your own facility.
Bring a site, a utility bill or a question. We will show you where the loss is.


