Keep IoT simple and secure
IoTree® is an IoT service platform and has been designed from the ground up to be secure, user-friendly and compliant with the relevant regulatory framework. In addition, IoTree® is fast to deploy and can be implemented across the board. IoTree® enables digital business models based on physical products and was developed with the requirements for major rollouts of water and heat meters in mind.






Trusted by over 50 clients

Manages data for everyone
With IoTree®, you get a secure, self-service management tool that lets you create and manage new contracts and access analytics and smart rules for your business user groups. To reduce configuration and deployment risks, our device, key, user management and login schemes meet the highest usability standards, e.g. passwords are no longer required.

Usable security and privacy by design
IoTree® provides architecture, protocols, infrastructure and smooth operations according to the highest security levels and best usability standards. During implementation, we follow the Secure Development Lifecycle within an agile development environment. IoTree®-specific aspects are: Onboarding and Key Management, OTA Firmware Updates, Public Key Infrastructure (PKI), Intrusion Detection and Prevention System (IDPS), Physical Tamper Detection (SEAL) and Threat Modelling.
IoTree® Service Platform Functions
IoTree® enables the secure connection of IoT hardware and the use of IoT applications. With its high flexibility and diverse features, IoTree® supports utility users in particular in implementing use cases and managing IoT hardware and the related infrastructure in an efficient and intuitive way.
Security
IoTree® follows the concepts of security by design and privacy by default. Our unique additional TLS encryption for LoRaWAN® also enables secure connectivity for KRITIS applications. We thus offer you the highest level of security for your data for selected sensors in accordance with BSI and ENISA standards and are also GDPR compliant.
LoRaWAN® Infrastructure Management
The integrated LoRaWAN® Infrastructure Management supports you in efficiently managing your LoRaWAN® gateways. To do this, we increase your network security with hardened gateways and a hardened LoRaWAN® Network Server.
Visualization
The integrated visualization of the IoT data enables you to handle IoTree® intuitively and comfortably. The display is possible as map and graph view as well as in tabular form.
Device Management
Our device management offers you the possibility to manage IoT devices efficiently, centrally and manufacturer-independently. With definable rules and alarms, we support you in automating your processes.
Interfaces and communication technologies
The communication technologies supported by IoTree®, such as LoRaWAN and wM-Bus, enable the connection of a variety of IoT devices. With the help of a wide range of standardized interfaces, such as MQTT and REST, the data can also be efficiently fed into third-party systems and further used.
Multi-client capability
IoTree® enables digital business models for LoRaWAN® network operators. With our Risk and Data Protection concept for managing customer and CRITIS data, data security and DSGVO do not pose any complications for you. In addition, IoTree® is available as a white label and can be adapted to your corporate design.

Cloud Setup
With Cloud Setup, the IoTree® service platform is hosted on our cloud infrastructure. You get the full functionality of IoTree® and we take care of all tasks related to operation, maintenance, backups and updates. For you, this means less internal IT effort and the security of an optimally maintained IT infrastructure. Of course, we only use German data centers, which are certified according to ISO 27001.100% DSGVO-compliant.

On Premises Setup
With an On Premises installation, the IoTree® service platform is hosted on your own IT infrastructure. We provide your IT or your IT service provider with the software for this purpose. All aspects relating to the installation of updates, operation of the infrastructure and maintenance and updates are therefore your responsibility. The advantage of an On Premises installation is that your data does not leave your own infrastructure. Full data sovereignty.
Frequently Asked Questions About PHYSEC IoTree
PHYSEC IoTree is a secure IoT platform for connecting, managing, and utilizing distributed IoT devices and their data. PHYSEC IoTree was developed specifically for applications with high requirements for security, data protection, and scalability. Typical areas of application include municipal utilities, energy and water suppliers, smart metering, smart cities, industry, and critical infrastructure. PHYSEC IoTree supports both large-scale device rollouts and the long-term, secure operation of the connected IoT infrastructure.
Yes. PHYSEC IoTree is designed for use in critical infrastructure and adheres to the principles of “Security by Design” and “Privacy by Default.” Security mechanisms are incorporated throughout the entire lifecycle—from device connectivity and key management to communication and platform operation.
For the cloud operation of PHYSEC IoTree, we exclusively use data centers in Germany that are ISO 27001-certified.
Yes. PHYSEC IoTree can be operated entirely on-premises on the customer’s own IT infrastructure. The data never leaves the customer’s infrastructure. This allows operators to retain control over their data, infrastructure, and operational processes.
No. PHYSEC IoTree does not require the use of a public cloud or a specific hyperscaler. In addition to our cloud offering in German data centers, PHYSEC IoTree can be operated entirely on a company’s own infrastructure. Companies can thus choose the operating model that best meets their requirements for IT security, compliance, data sovereignty, and digital sovereignty.
PHYSEC IoTree supports various communication technologies, such as LoRaWAN and wM-Bus. IoT data can be integrated into existing IT systems and third-party systems via standardized interfaces such as MQTT and REST. For example, the PHYSEC IoTree API enables the integration of asset management systems, line-of-business applications, other IoT platforms, and automated billing systems.
PHYSEC IoTree integrates Public Key Infrastructure (PKI), key management, and secure device onboarding as central components of its security architecture. This enables the controlled management of identities and cryptographic keys and the secure integration of devices into the IoT infrastructure.
PHYSEC IoTree relies on secure communication between devices, infrastructure, and the platform. For select LoRaWAN sensors, PHYSEC IoTree also offers TLS encryption, which provides an additional layer of security for communication.
PHYSEC IoTree combines user, device, and key management into a single centralized platform. IoT devices can be centrally managed regardless of manufacturer and configured with rules and alerts. At the same time, PHYSEC IoTree supports multi-tenant operating models, allowing, for example, different customers, organizational units, or user groups to be managed through a shared platform.
PHYSEC IoTree supports OTA firmware updates, enabling centralized updates for connected IoT devices. This is particularly important for large device fleets, where security updates and new firmware versions must be distributed efficiently. PHYSEC IoTree is also developed according to a secure development lifecycle, in which security requirements are continuously integrated into the development process.
With PHYSEC IoTree’s cloud-based operation, we handle the platform’s operation, maintenance, backups, and updates. With on-premises operation, the infrastructure, maintenance, and installation of updates are the responsibility of the operator or their IT service provider. This allows the PHYSEC IoTree operational architecture to be adapted to specific requirements regarding availability, network isolation, and operational responsibility.
Yes. PHYSEC operates an information security management system (ISMS) certified to ISO/IEC 27001. The scope of the certification covers all departments of PHYSEC GmbH and specifically includes the processes for the development, maintenance, testing, and release of PHYSEC IoTree, as well as the provision of customer systems as a SaaS solution. The certification was conducted by RSM Certification and is listed under certificate ID RSMCERT.2024.12. In addition, we exclusively use ISO 27001-certified data centers in Germany for the cloud operation of PHYSEC IoTree.
What our network says
Stadtwerke Göttingen IoTree
"Connecting remotely readable heat meters to PHYSEC's IoTree® platform enabled us to significantly reduce average flow and return temperatures and volume flow in our district heating networks. These optimizations result in high annual cost savings."
Municipal Utilities
Goettingen AG
Gelsenwasser AG
"The cooperation between Gelsenwasser AG and PHYSEC GmbH is always constructive, characterized by a very high level of technical competence and an open, trusting relationship with each other. With this background, we have already successfully implemented the LoRa®TLS project for efficient remote meter reading, which we will continue to develop together in the future."
Gelsenwasser AG
Stadtwerke Göttingen LoRaWAN
Stadtwerke Göttingen
"The IoTree® platform provides convenient access to our LoRaWAN® data. Due to the intuitive operation, the various settings and the map function, we always have a perfect overview of our devices. Thus processes get optimized and enable a smooth workflow."
Municipal Utilities
Goettingen AG
Learn more about our services
Built for Utilities
PHYSEC has a wealth of experience in securing assets for utility companies, effectively addressing the industry's needs and challenges.
Built for OEMs
Thanks to our great expertise in embedded security, OEM companies can shift their attention towards their use cases.
LoRaWAN® Infrastructure
Our LoRaWAN® Starter Project provides an opportunity to set up LoRaWAN® network quickly and efficiently.



