Nothing connects, installs, or writes. See the security posture →
The platform

One engine.
Every flow system.

The physics of early warning does not depend on the medium. PRISM reads water, coolant and current the same way, because every continuous flow carries a signature, and that signature shifts before the system fails.

Read-only
No write path to your plant
5
Dispatch channels
4 to 8 wks
From export to scored results
A single PRISM prediction, showing the asset, the named failure mode, the predicted time to failure with a confidence window, and the recommended action.

One prediction as the operator sees it. Asset, failure mode, days remaining, and what to do about it. Site names anonymized.

Why thresholds miss

A line is the wrong instrument.

A threshold watches one channel and fires when it crosses a line. By then the failure has already happened. The information that would have warned you was in the relationship between channels, months earlier, and no single line can see it.

📏

One channel at a time

Pressure is fine. Current is fine. Temperature is fine. The three of them moving together in a way they never have before is the signal, and a threshold cannot represent it.

🌑

The control loop hides the decline

When efficiency fades, the controller compensates to hold the same output. The result looks healthy for months. The effort spent to hold it does not.

📈

The calendar cannot outrun the fault

Some failure modes develop faster than the interval between the checks assigned to catch them. A schedule followed perfectly still leaves the asset uncovered for most of the interval.

How it works

Signatures, not thresholds.

PRISM came out of clinical prediction work, turning a medical record into a scientific instrument. The techniques that let you see a patient decline turned out to read a pumping station just as well.

🧬

Homeostasis, borrowed

A healthy system holds a steady state under changing load. So does a healthy patient. Failure is the loss of that regulation, and it shows up well before any single reading goes out of range.

📊

Embedded, then measured

Telemetry is projected into a high-dimensional space, the way a language model embeds words. Once an asset's behavior is a position in that space, you can do arithmetic on it: fit it, compare it, and see the jump across many dimensions at once that a single channel would never show.

🏟

Two layers, not one

The first layer evaluates each sensor on its own. The second combines them into a verdict for the asset. That second layer is why a struggling lead pump with a healthy standby behind it does not become an alarm.

The pipeline
Ingest once. Decide five times.
SOURCES SCADA / historian BMS / DCIM EPMS / RTU Work-order text READ-ONLY PRISM ENGINE DetectSignature drift, multivariate ClassifyProbable failure mode ForecastDays to failure, with band Triage & rank DISPATCH CMMS work order SMS to on-call Voice escalation Email / chat digest API / webhook NO WRITE PATH TO YOUR CONTROLS

One-directional ingest in, decisions out. Nothing in the product can change a setpoint, close a valve or start a machine.

Real operating data

No data-cleaning project first.

Most predictive tools assume a tidy, continuous, well-labeled feed. Industrial telemetry is none of those things, and the gap between the demo and the deployment is where those tools die.

A remote station drops off the network for a week, then transmits a week of readings in two minutes. A tag is named for the contractor who installed it in 2009. Half the assets have no failure history at all. A sensor was replaced and nobody wrote it down.

The same character shows up in medicine, where a patient disappears for a year and returns mid-illness, and you have to pick the story up in the middle. The models were developed against that problem first. Handling it here is not a workaround. It is the design.

  • No cleanup before you start. Mixed, gapped and inconsistent records are the expected input.
  • No labeled failure set required. Where work-order history exists we parse it, free text included. Where it does not, anomalous periods are surfaced for short human review and the model bootstraps from there.
  • No baseline history required on a new build. Commissioning is a natural starting point: the healthy signature is established as normal is being established.
Masked degradation
Watch the effort, not the output.
CONTROLLED OUTPUT · LOOKS FINE RUNAWAY EFFORT SPENT TO HOLD IT · CLIMBING CEILING REACHED MASKED DECLINE DETECTED

As heat transfer or hydraulic efficiency fades, the control system compensates by raising flow or speed to hold the same result. Output looks healthy for months. PRISM watches the compensation, which is where the decline actually shows.

Tuning

Set against your cost of intervention.

A prediction engine that ignores what it costs you to respond will be wrong in the expensive direction. We set the balance per deployment, per asset class, with you at scoping.

🚚

Expensive to respond → the model stays quiet

A remote station four hours from the depot. A truck should never roll for an asset that does not need work, so the model is set so that when it speaks, it is right.

🛡

Cheap to respond → the model surfaces everything

A plant with a crew already on site, where the consequence of a miss is a compliance event rather than a truck roll. Here nothing should be missed, so the marginal case gets surfaced.

The output

A date, a part and a lead time.

Written for the person who already has the wrench. A health index of 0.62 tells a maintenance planner nothing they can schedule against.

  • Which asset is drifting, ranked against everything else you own.
  • How it is going to fail, named from the shape of the deviation, with the signature evidence behind it.
  • How many days you have, as a window rather than a score.
  • What it costs if you wait, so the deferral is a decision rather than a default.
See how it gets dispatched
Live output format
Prediction 4417
AssetBooster Station 12, Pump 2 · 75 hp, VFD driven Failure modeBearing degradation, drive end ConfidenceHigh · signature match across three correlated channels Time to failure94 days  ·  window 78 to 112 RecommendedSchedule bearing replacement at next planned outage. Parts lead time 21 days. If deferredEmergency replacement plus motor rewind. Estimated 4.1× planned cost. Dispatched toCMMS work order · on-call SMS

Format shown from a production water deployment. Data center and process-plant output carries the same fields against the relevant asset class.

The planning view

A plan, ordered by how long you have.

This is the view a maintenance planner opens. Not a health score to interpret, but every monitored asset laid out against the clock, so the work sorts itself.

Maintenance planning
Failure runway: when each asset needs intervention.

Each bar is one asset's predicted days-to-failure window. Where it sits is when to act. How dark it is is how certain and how severe. Sorted soonest first, so a planner works top to bottom.

Schedule
Plan
Monitor
0d 7d 30d 90d 180d+
Lift station 12
10-24 d
Booster station 04
18-33 d
Well pump 07
27-45 d
Treatment works 02
29-47 d
Lift station 31
32-50 d
High-lift pump 1
34-52 d
Chilled water pump 3
41-59 d
Cooling tower fan 2
58-86 d
Booster station 19
96-138 d
Well pump 22
124-172 d
Critical Elevated Monitor Dispatch window is the first 7 days. Nothing is in it. Soonest is 10 days out.
Coverage mapping

Which failures your schedule cannot catch.

Maintenance runs on fixed intervals. Some failure modes develop faster than the interval assigned to catch them, so the asset sits uncovered for most of the cycle no matter how diligently the work is done. We show you which ones, with the numbers.

01

Map every mode

For each asset, we list every failure mode it is known to have, then show how each one is covered today: by live telemetry, by a scheduled task, or not at all.

02

Compare speed to interval

How often the task runs, against how fast the failure actually develops. A partial discharge test on a three-year cycle cannot catch a fault that matures in two months, and we show the arithmetic.

03

Document the change

Where live data covers a mode, we produce the written evidence your maintenance program needs on file before a task comes off the calendar.

Not every task should go, and we will say so. A protection relay only reveals its condition when you operate it, so a quarterly functional test earns its place. The tasks worth questioning are the ones assigned to catch a fault that outruns them.

The standard has already moved. The 2026 edition of NFPA 70B, the US standard for electrical equipment maintenance, allows condition data to set maintenance intervals in place of a fixed calendar, and accepts continuous monitoring in place of some manual inspections.1 Adoption is still low. That gap is the opportunity.

An open alert can count against you. The same standard grades equipment partly on whether monitoring alerts have been resolved, so a system that generates alerts nobody closes leaves you worse off than before. This is why PRISM triages every flag before it reaches a person, and why reconciling against closed work orders is part of the product rather than a report you assemble yourself.
Capabilities

What ships today.

Everything marked live is running in production against a paying customer's assets. We will tell you the same thing on a call.

StatusCapabilityWhere
Live

Multivariate signature detection

Per-asset drift caught across correlated telemetry channels, before any threshold is crossed.

Water · data centers
Live

Failure-mode classification

The probable fault named from the shape of the deviation, not just an anomaly score.

Water · data centers
Live

Time-to-failure forecast with confidence band

A window in days, ranked across the fleet, that a planner can schedule against.

Water · data centers
Live

Root-cause reasoning in operator language

The sensor pattern and the likely fault, written for the crew rather than the data team.

Water
Live

Prescribed corrective action

The recommended fix, parts lead time, and the cost multiple of deferring it.

Water
Live

Dispatch: work order, SMS, voice, email, webhook

Severity-routed into the CMMS, EAM, dispatch queue and phones your team already uses.

Water
Live

Per-deployment sensitivity tuning

Set by asset class against your real cost of intervention.

Water
Live

Gapped, bursty and mislabeled telemetry tolerance

Including sensor classification and calibration for site-specific naming conventions.

All
Live

Label generation from raw work-order dumps

Including free-text maintenance notes, cleaned on our side rather than yours.

Water
Live

Cost-avoidance reconciliation against closed work orders

So the return becomes measured rather than modeled, in a monthly one-page summary.

Water
Deploying

Data center cooling plant

Chillers, cooling towers, CRAHs, chilled and condenser water pumps, CDUs and coolant loops.

Evaluations open
Deploying

Data center power chain

UPS strings, switchgear and distribution, read from existing EPMS and DCIM telemetry.

Evaluations open
Deploying

OEM-embedded fleet monitoring

Prediction delivered through a pump and SCADA manufacturer's installed base, at fleet scale.

Production ready
Deploying

Nationwide well monitoring and leak detection

Expansion of the reference deployment beyond the original station set.

In rollout
Deploying

Failure-mode coverage mapping

Every documented mode for an asset class classified by how it is covered today: existing telemetry, added sensor, truck roll, outage, or nothing.

Transformers · switchgear
Deploying

Interval-against-development-window analysis

Each scheduled task tested against how fast the failure it is assigned to catch actually develops.

Electrical assets first
Deploying

Regulated-utility deployments outside the US

Where failure cost includes regulatory penalty and interruption commitments, not only repair.

UK · UAE
Validating

Alarm correlation and root-cause grouping

This alarm, plus that alarm, plus this temperature rise, means one thing. Today that inference lives in the head of whoever is on shift.

Data centers first
Validating

Cross-fleet comparative failure intelligence

If one equipment model is failing faster than the rest under similar load, you will know. Sharper with every site added.

All
Validating

Condition evidence for interval extension

The documented justification a maintenance program needs on file before a calendar interval is extended.

All
Validating

Bidirectional CMMS and EAM sync

Closing the loop from dispatch back to outcome automatically, and carrying asset health into capital planning.

All
Validating

Energy and process model families

Midstream and pipeline pumping, mining dewatering, chemical and pharmaceutical process plant.

See portability

Live means running in production on a customer's assets today. Deploying means the models are built and evaluations or rollouts are underway. Validating means the approach is designed and being proven out before we ship it. Where the method goes next

Integration surface

Read paths and write paths.

LayerSystemsTypical interfaceDirection
Water & wastewaterSCADA, RTUs and pump controllers, historian, district meteringHistorian export or API, Modbus over the existing gatewayRead only
Data center coolingChillers, cooling towers, CRAH and CRAC, chilled and condenser water pumpsBACnet, native or via comm card; VFDs over BACnet or ModbusRead only
Liquid coolingCDUs and coolant loopsRedfish REST over JSON (DMTF DSP2064); Modbus or SNMP on older unitsRead only
Data center powerUPS, PDU, switchgear, generatorsSNMP via DCIM, Modbus via EPMSRead only
Maintenance historyCMMS and EAM records, including free-text work ordersFlat export, or API where availableRead only
DispatchCMMS and EAM, dispatch queue, SMS and voice gateway, email and chatAPI, webhook, or the channel you already useWrite, to your workflow, never to your plant

Where BRICK tagging or ASHRAE Guideline 36 point naming is already in place, calibration is faster. Neither is a prerequisite. A chiller on a current controller typically exposes fifty to sixty usable points; a site with sixty CRAHs is a better fit than a site with one chiller.

Security posture

Nothing connects, installs, or writes.

That is not a policy we adopted. It is how the product is built, which is a different and more durable thing.

🔒

No write path exists in the product

PRISM cannot change a setpoint, close a valve or start a machine. Not because it is disabled, but because the capability is not built. Ingest is one-directional from your historian or API, under a read-only credential. No agent, no controller and no gateway is installed on your network.

📁

The evaluation is entirely offline

Six to twelve months of history as flat files under NDA. No connection to your environment, no credential issued, no firewall change, no vendor onboarding queue. If your security team never has to open a ticket, that is the design working.

📄

Certifications, stated in writing

We will state our current SOC 2 and ISO 27001 position directly and in writing at the scoping call, specific about what is in place and what is in progress. The honest answer belongs in a document you can hold us to, not a badge on a web page.

📜

An architecture one-pager, on request

Covering the data path, storage, encryption in transit and at rest, retention, and the no-write guarantee. Available before you commit to anything, and written for your security reviewer rather than your procurement team.

🔐
Your incumbents stay exactly as they are. We will not change your existing vendors, service contracts or controls relationships, and we will not ask you to. PRISM is a layer that reads what is already there. Incumbent monitoring stays exactly as it is.
FAQ

Engineering questions

No to both. Mixed, gapped and inconsistent telemetry is the expected input, and the models were developed specifically against data of that character. Where work-order history exists we parse it ourselves, free text included. Where it does not, we surface anomalous periods for a short human review to label, and bootstrap from there. On a new build with no history at all, commissioning is a natural starting point, because the healthy signature can be established as normal is being established.

No, and it is not a configuration option. There is no write path to plant controls in the product. Ingest is one-directional from your historian or API, with no agent, controller or gateway installed on your network. The only thing PRISM writes to is your workflow: a work order, a text message, a call, a webhook.

Threshold and anomaly tools fire on a single channel crossing a line, which by definition happens once the failure is underway. They also stay tied to the hardware they shipped with. PRISM models the joint signature across correlated channels and catches the drift before any threshold is reached. It names the probable failure mode, quantifies the time you have, and stays vendor-neutral across a mixed fleet. It also reduces the alert volume rather than adding to it, because every flag is triaged before a person sees it.

That is the failure mode we designed against. There is a console if you want one, but it is not where the product does its work. The daily ranked list arrives in the channel your team already reads, and individual predictions become work orders in the system your crews already open. If PRISM is doing its job, most of your people never have to learn a new tool.

Because the engine learns signatures rather than one asset type. A great many industrial assets are ultimately an electric motor driving a pump or a fan, and those generalize across scale. A fan in a server and a fan in a treatment plant are the same device at different sizes, and the model does not care about the size. The work in a new sector is tuning against that sector's failure modes and cost of intervention, which is what the evaluation is for.

Four to eight weeks, at no cost, and in the data center case with no live connection at all. One call of about forty-five minutes to scope the export and agree the asset list. You send six to twelve months of history as flat files under NDA. We calibrate, run a retrospective against failures you already remember, and score it, with misses counted as loudly as hits. Then you decide. If the retrospective finds nothing, you have learned that your plant is behaving, which is also a useful result.

See the engine run on your data.

We build a model on your telemetry, then review the predictions against your real failure history. You decide after you have seen it work.

Standards and sources

1. NFPA 70B, Standard for Electrical Equipment Maintenance. The document became a standard with mandatory language in its 2023 edition. The 2026 edition adds §9.1.1.3, which permits the potential-failure to functional-failure (P-F) curve method to be used in determining maximum maintenance intervals; expands scope to cover predictive maintenance; and permits permanently installed thermal monitoring in place of field infrared thermography for several equipment classes. Section text is drawn from NFPA's published committee record rather than the issued edition, and should be verified against the purchased standard before being quoted.

Interval criteria. SAE JA1011 requires an on-condition task interval shorter than the shortest probable P-F interval. IEC 60300-3-11 defines the P-F interval and covers condition monitoring in task selection.

Figures. Failure development windows are industry-reported estimates rather than measurements. Adoption rates for condition-based and predictive maintenance are from published industry survey data, 2025. Performance figures are measured on Firstlook production water deployments and are labeled by evidence tier on the proof page.