Read-only agentic diagnostics, for BAS service partners

A Diagnostic layer for thesystems you already run

ThermAIsys watches the plant, cuts the noise, and leaves the controls to you, trusted across Metasys (Johnson Controls), Desigo CC (Siemens), and Honeywell EBI.

The service day starts in a wall of alarmsSymptoms without causes, Three head ends, three languages, Trucks rolling on best guessesSecond visits kill the agreement, break-fix gets bid-shopped, customers demand predictive maintenanceAnd underneath it all, the judgment holding this together is retiring.

Compressor amps spike
High discharge psi
VFD fault 24
Approach temp high
Low suction psi
Ctrl loop hunting
The Reframe

The BAS records everything and concludes nothing,your team was never behind, the tooling was.

The Solution

The wall becomes a short
list of answers

Whatever fails, whichever head end reports it, one ticket per root cause. Like this one, from the live demo:

Air-handling units above the cloud line
CriticalTKT-88214 · Live demo data

Chiller 1 · Compressor A

Meridian Logistics Hub

Issue signature

Current draw spike (+18%) correlated with suction pressure drop (-12 psi) over 22 min.

Recommended action

Inspect VFD speed controller. Verify liquid line solenoid response. Sample oil for metal shavings.

Confidence 96%412 raw alarms → 1 ticket

The signature comes from live trends, the action list goes straight onto the truck. The same reasoning covers the whole plant, your technician stays the last word, and what they find sharpens the next ticket.

How it works

From connection to conclusion,
in four stages

Your own technician runs the onboarding, start to finish.

Security

Built to pass your customer's
security review

The last tool your customer's IT team rejected probably asked for write access and an inbound port. Here is the same review, answered side by side.

The review question
A typical connected tool
With ThermAIsys
BAS write access
Requests write permissions
None. The write path does not exist
Inbound firewall ports
One or more, often behind a DMZ
Zero
Network changes
VPN tunnel, firewall exceptions
One outbound egress rule
Transport
Varies by vendor
TLS 1.3, MQTT, outbound only
Software integrity
An installer on the BAS server
cosign-verified container, rootless Docker
Data residency
Often unstated
US infrastructure
Compliance posture
Varies
SOC 2 Type II, in audit
FAQ

Frequently asked questions

No. It is read-only by architecture — the write path does not exist. ThermAIsys watches the plant and raises tickets; your team and your BAS keep every point of control.