Your home, your data, your rules
A system that switches heating and charges cars in people's homes has to earn trust. Cantabile is built to keep control local, ask before it shares, and say plainly what it does and does not do.
Privacy and consent
Consent per purpose
Sharing data and allowing control are two separate decisions – and each can be given per recipient: the building, the community, a supplier. Control is also consented per device.
Less data, by design
Building and community operators see sums, not a flat's time series. Billing data is used for the bill only. The cloud receives the postcode, never the exact location.
Learning at home
The box trains its forecasts on its own history, even without the consent to share – and then nothing about them leaves the box.
The cloud helps; the home decides
Safety-critical control never leaves the home: frost protection, comfort floors and device safety do not depend on the internet. If the cloud is unreachable, the box keeps planning with its last tariffs and its own forecasts and buffers its data until the line is back.
Every new site starts in shadow mode, acting on nothing; control is switched on device by device. A manual change on the wall always wins for a while.
Security
- Outbound connections only – no open ports into homes
- Per-site keys, limited to that site's own data
- Signed A/B system updates, verified at boot, with automatic rollback
- Tariffs, models and add-ons only as signed bundles
- Grid-operator orders checked by signature before they act
- Four-eyes review for every add-on in the store
- Remote help only with the owner's consent; every access logged
- An audit log of every change in the console
Built on what the industry already speaks
Cantabile builds on Home Assistant, the open home-automation platform with more than 2,000 integrations, and on open protocols. Devices stay usable without us.
| Standard | What it is for | Status |
|---|---|---|
| Home Assistant | Reading and controlling devices; the owner's own dashboards | Today |
| Zigbee, Thread, Matter | Sensors, thermostats, switches – any common radio stick | Today |
| MQTT | Local messaging between devices, Home Assistant and the agent | Today |
| Modbus RTU/TCP | Inverters, batteries, heat pumps, wallboxes | Today |
| EEBUS | §14a limits from the grid operator's control box; heat pumps and wallboxes | Implemented Field tests coming |
| ESPHome | Open firmware for our own hardware line | Coming |
| SML, M-Bus, OpenTherm, eBUS, SG Ready, KNX, BACnet | Meters, heating and building systems through our hardware line | Coming |
Honest about the status
As of November 2026.
| Part | Status |
|---|---|
| Hub OS | Released on the stable channel; running on pilot hardware. |
| Edge Agent and Home Assistant add-on | Running on a pilot home and on 98 simulated homes and buildings across Germany. |
| Cloud platform and console | Running in a pilot environment with the simulated fleet. |
| Tenant power and Smart Market | Calculated and shown in shadow mode; nobody is billed yet. Legal and tax review comes before the first bill. |
| White-label ESPHome hardware | Coming. |
| EEBUS with real control boxes | Implemented; field tests coming. |
| Residents' workspace in the console | Coming. |
Questions about security or data?
We are happy to go through the details with your data protection officer.