Multiple APIs. Multiple systems. One platform.
A real-time IoT monitoring platform that brings disconnected data sources together — with dashboards, automated alerts, and instant notifications.
SPI Brunei operates across multiple environments, each generating continuous sensor data from different networks and sources. The challenge was not a lack of data — it was that the data lived in disconnected systems, making real-time visibility and decision-making impossible without a platform that could unify it all.
SPIBN Keyva is a full-stack IoT monitoring platform that ingests data from multiple external sensor APIs, decodes specialized data formats, surfaces everything through interactive dashboards and maps, and delivers instant alerts via WhatsApp — with role-based access for every type of user.
Sensor data was everywhere. A unified view was nowhere.
Multiple sensor networks. Multiple data sources. Multiple stakeholders needing different views of the same information. Without a shared system, real-time decision-making wasn't possible.
Disconnected data sources
Sensor data came from multiple external networks with no central place to view or compare it.
No real-time visibility
Without live ingestion and display, teams were always working off stale data — unable to respond to changing conditions as they happened.
No alert infrastructure
When readings crossed critical thresholds, there was no automated system to notify the right people immediately.
No unified access model
Different stakeholders — admins, staff, and customers — needed different views, but there was no way to scope access appropriately.
From Ingestion to Notification
Keyva covers the full lifecycle of IoT data — from ingestion to visualization to notification.
Real-Time Dashboards
Live sensor readings displayed through interactive time-series charts, with historical trend analysis and date range filtering. Each dashboard is purpose-built for the data it displays.
Geolocation Maps
Interactive maps powered by Mapbox and Leaflet showing device locations, live positions, movement history, and path visualization.
Multi-Tier Alert System
Four severity levels — Critical, High, Medium, and Low — each with distinct color coding, visual indicators, and resolution tracking with timestamps.
Automated Data Pipeline
Continuous data ingestion from external APIs with duplicate detection, automatic timezone conversion, and transaction-safe bulk insertion.
WhatsApp Notifications
Instant outbound alerts via Meta WhatsApp Business API when sensor thresholds are crossed. Bulk sending to all active contacts with contact management and activation controls.
Role-Based Access
Three user roles — Admin, Staff, and Customer — each scoped to the tools and data relevant to their responsibilities.
API Management Panel
Staff-accessible interface for manual sync triggers, device configuration and inspection, CSV data import with per-row validation, and bulk data operations.
IoT Device Management
Automatic device discovery and registration from API sources. Active/inactive status tracking, device categorization, and raw field inspection for debugging.
Data Import & Export
CSV import for bulk sensor data upload with per-row error reporting. Historical data API endpoints with date range filtering for downstream use.
Multiple External Systems — One Interface
Multiple external systems — connected, managed, and surfaced through one interface.
IoT Sensor API (EosGate)
Primary sensor data source. Authenticated API calls bring in live readings from all connected sensor networks continuously.
WhatsApp Business API
Meta Graph API v22.0. Outbound notifications via pre-approved message templates with dynamic parameters sent to all active contacts.
AWS Lambda
Decodes raw hex-encoded binary payloads from specialized sensors. Handles 47-byte data frames with XOR checksum validation.
AWS RDS (PostgreSQL)
Primary database for all sensor data, user accounts, alert records, and device registry. Connection pooling via psycopg2.
Mapbox + Leaflet
Interactive geolocation mapping. Mapbox GL for base layers, Leaflet for device pins and position overlays.
Google Login
Sign in with Google — staff and users log in using their existing Google account instead of creating a separate password. Simple, secure, and familiar.
Built for Reliability
Production-grade infrastructure — containerized, cloud-hosted, and built for reliability.
Built for Complexity
External integrations connected
Specialized real-time dashboards
Alert severity levels
User role tiers
Languages supported
Deployment environments
Built-In Protection
CSRF Protection
CSRF token protection on all forms.
Secure Sessions
HTTP-only, HTTPS-only, SameSite=Lax session cookies.
Access Control
Role-based access control with custom decorators.
Email Verification
Email verification required for new accounts.
Secure Resets
Token-based password reset flow.
Secret Management
All secrets managed via environment variables.
We build platforms that work.
Every business is different — let's talk about what you need and how we can build it.