An electrical substation surrounded by green fields

The access management platform for critical infrastructure

Smart locks.
Connected control.

NJoin connects smart locks, access permissions and digital keys in one platform. Give your people a white-label app branded as your own, with operational data kept on your premises.

+Built for essential operations.
Designed around your control.
On-premise by design End-to-end payload encryption Certificate-pinned gateway Hosted on STACKIT

For the systems
that keep us moving

Energy & utilities Water infrastructure Industry Transport

The smart-lock access flow

From permission
to a secure site.

Access can come from a user’s role, fixed permissions assigned to that user, or an approved request. NJoin connects all three to your smart locks and your own branded app.

  1. 01

    Assign the right access.

    Grant access through a user’s role, assign fixed permissions to an individual, or let people request the access they need.

  2. 02

    Control where and when.

    Define which locks a person can use, with time limits where needed. When access is requested, review its scope and approve, adjust or deny it.

  3. 03

    Deliver digital keys.

    Connect access permissions to digital credentials through your integrated systems. Keep keys and access rights up to date as permissions change.

  4. 04

    Open your smart locks.

    Open supported smart locks through your own branded app, powered by NJoin. Your people see your name, logo and colours.

  5. 05

    Confirm when required.

    When a lock requires confirmation, capture photos of the secure situation. The images become part of the lock’s activity record.

  6. 06

    Keep oversight.

    Follow permissions, requests and lock activity in the backoffice. See device activation, credential synchronisation and key-expiry status across your operation.

Planned maintenance, connected access

Bring contractors into the same flow.

Create a work order for a site and time window. Contractors are submitted through the portal; approval assigns their lock group and provisions timed access.

Featured integrations

Your locks and systems.
One connected workflow.

Explore our integrations

A selection from our integration ecosystem. NJoin connects smart locks, physical access control and the supporting services around your access workflow.

Your white-label app

Your brand.
Powered by NJoin.

The NJoin mobile app is delivered as your own branded app, with your organisation’s name, logo and colours. Employees and contractors use their assigned access to open supported smart locks and can request additional access when needed.

Behind your app, the NJoin platform connects permissions, digital keys, the backoffice and your access systems.

  • Your name
  • Your logo
  • Your colours

Security starts with the architecture

Your data.
Inside your perimeter.

Your access and contractor records are stored on-premise, including the work orders managed through the contractor portal. STACKIT hosts the relay and portal services that connect your people to your on-premise environment.

Talk architecture with us

NJoin / Platform overview

Connected access. Controlled by you.

Security by design
01 / PEOPLE

Your teams

Mobile access
Your white-label app

Secure Enclave on iPhone.
Android Keystore on Android.

Encrypted payloads
Web access
Contractor portal

Contractor and work-order records stored on-premise.

A familiar experience for everyone entering your sites.

02 / CONNECTIVITY

NJoin cloud Hosted on STACKIT

Mobile payload route
Encrypted relay

Forwards mobile commands and responses without decrypting them.

Payloads stay encrypted
Web services
Portal services

Connect to business records stored on-premise.

Cloud services connect to your on-premise environment.

ON-PREMISE

Your environment

Customer network
Secure gateway

Decrypts mobile payloads inside your environment.

Encrypted responses
Backoffice & permissions
Business records People & work orders

Includes contractor portal records.

Connection initiated from your networkGateway to relay · TLS 1.3 · Certificate pinning
Outbound only
CONNECTED ACCESS SYSTEMSYour sites. Your hardware.
Smart locks Access control

01Mobile payloads stay private. End-to-end encryption between the app and your on-premise gateway.

02Your network initiates the connection. Certificate pinning checks the relay’s identity.

03Business records stay on-premise. Access permissions, contractor details and work orders are stored in your environment.

Conceptual platform overview. Deployment details vary by environment.
01 On-premise data ownership

People, access permissions and operational records are stored in your own environment. Your backoffice and system of record remain inside your organisation’s network.

02 Outbound connection only

Your on-premise gateway initiates the connection to the NJoin relay. A bidirectional channel carries requests back through that connection, without opening inbound firewall ports.

03 End-to-end payload encryption

Mobile command and response payloads are encrypted end-to-end between the user’s device and your on-premise gateway. This protects the message content in addition to the encrypted connection. The STACKIT-hosted relay forwards these payloads without decrypting their content.

04 Certificate-pinned gateway connection

Your on-premise gateway connects to the STACKIT-hosted relay over TLS 1.3. Certificate pinning checks the certificate’s public key against configured trusted pins and refuses the connection if none match.

05 Secure Enclave & phone key protection

On iPhone, NJoin generates and uses the device’s long-term private encryption key inside Apple’s Secure Enclave. That key stays within the phone’s security hardware. On Android, Android Keystore protects key material, with protection adapted to the Android version.

06 Contractor portal, on-premise records

Contractor details, work orders and their access permissions are stored in your own environment. The hosted contractor portal uses that same on-premise system and has no separate database for these business records.

Phone key protection, end-to-end mobile payload encryption and a certificate-pinned gateway connection each protect a different part of the access journey.

Where continuity matters

Essential infrastructure.
Extraordinary responsibility.

Some places do more than keep a business running. They keep society running. That’s where our focus is.

01

Energy & utilities

From substations to distributed grid assets. Give field teams access to the locations that keep the network running.

Keeping the power on
02

Water infrastructure

Connect access across treatment plants, pumping stations and remote facilities, with your operational data on-premise.

Protecting essential resources
03

Industry & transport

Bring employees and contractors into controlled environments with a consistent access experience across your sites.

Supporting continuous operations

Let’s build on what you have

Your infrastructure.
Our next conversation.

Let’s talk about your sites, your systems and your security requirements.

Talk to our team