A·IQ Operations Platform | Platform Overview

One platform. Two products. Zero compromise.

A·IQ pairs Signal building intelligence with Nexus asset management on a shared on-premise infrastructure. One database, one identity layer, one deployment. Buy either independently. Or buy both and close the loop.

On-PremiseAir-Gap CapableUnlimited UsersSDVOSB
A·IQ platform dashboard
A·IQ Signal screenshot
2
Independently sellable products
1
Shared infrastructure stack
Users · no per-seat fees
Air-Gap
Capable for classified sites
01 / Architecture

Three layers. One stack.

Infrastructure underneath, Signal and Nexus on top. Each piece is independently sellable. Together they close the loop.

01

Infrastructure.

Postgres + PostGIS, Redis, OpenBao secrets, FusionAuth identity, Loki + Grafana observability. Row-level security across every tenant. mTLS everywhere.

02

Signal.

BAS intelligence: alarms, faults, root cause, energy, power. Reads BACnet, Modbus, OPC UA. Cuts noise 80%. Names the 12 alarms that matter.

03

Nexus.

Asset and operations: CMMS, capital planning, calibration, spatial, field execution. Auto-creates work orders from Signal faults.

02 / Why Both Together

The closed loop.

Either product solves a real problem on its own. Bought together, the integration eliminates a category of operational drag every facility team accepts as normal.

Closed Loop

Detection → Action.

A Signal fault becomes a Nexus work order automatically with the affected asset, its history, and the right runbook attached. No middleware. No copy-paste between consoles.

Detection → Action. screenshot
Shared Identity

One login.

FusionAuth backs both products. Add a technician once. Permissions, audit logs, MFA same surface across Signal and Nexus.

1
identity layer for both products
Unified Asset Model

One asset registry.

Signal points and Nexus equipment records reference the same underlying asset. The chiller in your alarm log is the chiller in your work order.

Shared History

One timeline.

Alarm event, fault detection, work order creation, technician completion, post-work trend verification one continuous record.

Operations Spine

Site → Floor → Asset.

A spatial hierarchy tied to BIM, IFC, and CAD. Both products use the same hierarchy. New buildings drop in without re-modeling.

Telemetry Spine

TimescaleDB historian.

High-cardinality point data, alarm history, energy meters, work order audit all in Timescale with continuous aggregates and compression.

Security Spine

RLS + mTLS.

Row-level security per tenant. mTLS between every service. Secrets in OpenBao. The whole stack assumes hostile networks.

03 / Closed-Loop Operations

Signal identifies. Nexus responds.

The chiller alarm at 04:13. The dispatched technician at 06:00. The verified trend at 08:45. Same record. Same database. No integrators in between.

SIGNAL · DETECT FDD-1842 · AHU-3 Economizer leakage · 14% waste CORRELATE Asset Z-3041 Service hist · MTBF NEXUS · WORK ORDER WO-3091 · Marcus K. 2hr ETA · runbook attached CLOSE-OUT · HISTORIAN Logged · trend confirms fix verification trend back to Signal SIGNAL DOMAIN NEXUS DOMAIN
04 / Under the Hood

Three docker compose stacks.

Infrastructure underneath. Signal and Nexus on top. Versioned independently. Deployed together.

Stack 1
infrastructure.
services:
  infra-db:        # Postgres + Timescale + PostGIS
  infra-redis:     # cache + pub/sub
  infra-openbao:   # secrets vault
  infra-fusionauth:# identity
  infra-nginx:     # reverse proxy + mTLS
  infra-grafana:   # observability
  infra-loki:      # log aggregation
Stack 2
signal.
services:
  signal-core:     # API + business logic
  signal-protocol: # BACnet, Modbus, OPC UA
  signal-utility:  # Green Button, ESPI
  signal-intel:    # FDD, RCA, ML scoring
  signal-external: # weather, NOAA, utility APIs
  signal-worker:   # Celery task workers
Stack 3
nexus.
services:
  nexus-backend:   # API + work order engine
  nexus-frontend:  # React UI (MUI)
  nexus-geoserver: # spatial tile server
  nexus-fmeflow:   # CAD/BIM ingest
05 / Security & Deployment

Built for hostile networks.

On-premise by default. Cloud-deployable when required. Your facility data never leaves your network.

TLS everywhere, secrets in vault, row-level security on every query. Containerized and isolated so one service going down never takes the rest with it.

A·IQ is built by Arcis FM, a Service-Disabled Veteran-Owned Small Business (SDVOSB). Set-aside eligible for federal contracts. CAGE 14DG6 · UEI Z95MQL2KEYG3.

TLS Everywhere
Service-to-service · client-to-server · API-to-database
On-Premise
Inside your firewall · zero cloud subscription required
Air-Gap Capable
Operates without any internet connectivity
SDVOSB Certified
CAGE 14DG6 · UEI Z95MQL2KEYG3 · set-aside eligible
Row-Level Security
Multi-tenant isolation at the database level
NIST 800-171
OT network segmentation · firmware governance
06 / Reference

Common Questions.

Architecture and procurement questions on the A·IQ platform.

01

Do I have to buy both Signal and Nexus?

No. Signal and Nexus are independently sellable. Many customers start with one and add the other later. The infrastructure stack is shared either way.

02

What does the deployment look like?

Three Docker Compose projects on one or more on-premise Linux hosts. Infrastructure (databases, identity, secrets, proxy) plus Signal and/or Nexus on top. Air-gap deployable.

03

How does pricing work?

Site license, no per-seat fee, unlimited users. Optional managed support and integration services on top. Federal customers can procure direct-award via Arcis FM SDVOSB.

04

What hardware do we need?

Most sites run on a 16-core, 64GB RAM Linux server with NVMe storage. Larger portfolios scale horizontally. We size during the demo.

05

How long does implementation take?

Typical Signal-only stand-up is 4-6 weeks (infrastructure + BAS integration + first dashboards). Nexus migration from spreadsheets/legacy CMMS is 8-12 weeks depending on asset count.

06

Is the platform open source?

No, but the deployment is fully transparent Docker Compose, Postgres, standard open protocols (BACnet, Modbus, OPC UA, IFC). No proprietary lock-in.

See the platform in motion.

A 30-minute walkthrough of Signal and Nexus running against a live building. We will show you the closed loop end-to-end and answer the architecture questions your team has.

Federal & State Certifications
SBA Certified Service-Disabled Veteran-Owned Small Business California Disabled Veteran Business Enterprise California Certified Small Business