Standards · planned
Built on the standards you already use
Your devices, your customers and your regulators already speak standards. Polythings will speak them too, and never make one the only way in. "First release" means in the first release of the building block it belongs to.
Devices and connectivity
MQTT 3.1.1 and 5The main device protocolFirst release
Sparkplug 3.0 (ISO/IEC 20237)Industrial MQTT payloads and device stateFirst release
HTTP and WebSocketsDevices and gateways that can't hold a connectionFirst release
CoAP and LwM2M 1.2Constrained devices, including firmware updates through LwM2M's own update objectNext
SenML (RFC 8428)Compact sensor payloads, decoded out of the boxNext
GSMA SGP.32IoT eSIM profiles, managed with connectivity providersNext
LoRaWANThrough LoRaWAN network serversLater
Industrial and buildings
OPC UA (IEC 62541)Through the edge gateway, with certificates from our certificate authorityFirst release
OPC UA companion specificationsImported as device and asset models for machinery, pumps, robots and moreFirst release
Modbus TCP and RTUThrough the edge gatewayFirst release
BACnetThrough the edge gateway, for HVAC and refrigeration equipmentFirst release
OPC UA PubSub over MQTTMachines that publish OPC UA data to a brokerNext
MTConnectMachine-tool dataNext
IEC 61850 and DNP3Energy equipment such as inverters and substationsLater
Device and asset models
DTDL v3Import and export of device modelsFirst release
W3C WoT Thing Description 1.1Import and export of device modelsFirst release
Asset Administration Shell (IEC 63278)Export of assets and their submodels, as plant operators ask machine builders forFirst release
ISA-95The default hierarchy for factoriesFirst release
ECLASS, QUDT and UCUMStandard property identifiers and units in models and metricsNext
ISO 13374 and MIMOSACondition-monitoring vocabulary for predictive maintenanceNext
Identity and provisioning
X.509, CRL and OCSPCertificates for devices, gateways and servers, and revocationFirst release
IEEE 802.1ARBirth and operational device certificatesFirst release
EST (RFC 7030)Certificate enrollment and renewalFirst release
FIDO Device Onboard (FDO)Zero-touch onboarding when the final owner isn't known at the factoryNext
TCG DICE and TPM 2.0Hardware-rooted identity on microcontrollers and Linux devicesNext
Updates and the software supply chain
The Update Framework (TUF)Signed update metadata, roles and keysFirst release
SPDX and CycloneDXA software bill of materials with every releaseFirst release
CSAF 2.0 with VEXMachine-readable security advisories, and which releases each vulnerability affectsFirst release
IETF SUIT (RFC 9019, RFC 9124)Update manifests for microcontrollersNext
UptaneUpdates for vehiclesLater
Alarms and monitoring
ISA-18.2 and IEC 62682The alarm lifecycle and alarm-management metricsFirst release
OpenTelemetryMetrics and logs from devices and gatewaysFirst release
ISO 10816 and ISO 20816Vibration severity in predictive-maintenance templatesNext
Regulation and certification
EU Cyber Resilience ActUpdates, SBOMs and vulnerability handling for your productsFirst release
EN 18031-1, -2 and -3Cybersecurity for radio equipment in the EU, required since 1 August 2025First release
ETSI EN 303 645The IoT security baseline many buyers use as a checklistFirst release
UK PSTI ActNo default passwords, vulnerability disclosure and a published support periodFirst release
IEC 62443-4-1 and -4-2Our development process, and the component requirements your devices meetNext
SOC 2 Type II, ISO 27001 and ISO 27701Our own certificationsNext
Data and APIs
OpenAPI 3.1 and AsyncAPI 3The REST API, and events, webhooks and MQTT topicsFirst release
CloudEventsThe envelope for events and webhooksFirst release
Apache Iceberg, Parquet and ArrowStorage and queries, readable by DuckDB, Spark and SnowflakeFirst release
Postgres wire protocolGrafana and BI tools connect without pluginsFirst release