Rail & Automotive Maintenance Management

Safety-first CMMS built for regulated manufacturing.

SiebenCMMS delivers audit-ready maintenance management for IATF 16949 automotive and IRIS/ISO 22163 railway environments — with PPE interlocks, predictive maintenance, digital twins, and immutable compliance records built in from day one.

Access your instance → Explore modules
IATF 16949 ISO 22163 / IRIS ISO 45001 VDA 6.3 ISO 50001 ISO 9001 MSA POPIA / GDPR
12
Core modules
10
Security features
8
Notification triggers
11
Immutable record types
99.97%
Uptime SLA
8.4 min
Avg tenant provisioning
Platform modules
Every module you need.

Built specifically for the compliance demands of automotive and railway manufacturing. All modules are toggleable per customer deployment.

📦
Supplier portal & critical spares
Min/Max auto-PR, multi-source contingency, kanban order tracking, per-PO supplier messaging
IATF 6.1.2.3 Contingency plans Auto-PR trigger
→
🔄
Shift handover module
Structured digital handover across 4 categories — equipment, safety, jobs, spares — with dual sign-off and immutable locking
Alstom requirement Immutable on sign-off LOTO carry-over
→
⚡
Energy monitoring & digital twin
SCADA live feed, anomaly detection, Weibull failure probability, per-asset chronological timeline of every PM, RCA, and calibration event
ISO 50001 SCADA / PLC hooks Weibull PdM
→
🛡
HSE tracker & notification engine
Training matrix, license and medical expiry tracking, calibration lockout, 8 fully configurable notification triggers with escalation chains
ISO 45001 8 triggers Gauge lockout
→
🔐
Security & authentication
2FA at signup, biometric WebAuthn/FIDO2 login, invite-only registration, admin security console with org-wide policy toggles, active session management
WebAuthn / FIDO2 TOTP + SMS OTP Admin configurable
→
🔒
Advanced security & data integrity
Immutable record locking, SHA-256 tamper hashing, field-level audit log, PostgreSQL RLS, offline signing, suspicious login detection, geofencing, rate limiting
10 security layers Geofencing ECDSA offline sign
→
🚀
Deployment control plane
Single-tenant isolated architecture — each customer gets their own subdomain, database, and region. Terraform-automated provisioning in under 10 minutes
Option 2 — Isolated Per-tenant DB Data residency cert
→
📱
Admin control plane + mobile safety gate
12-module toggle board, live KPI strip, asset risk heatmap, user management — plus the technician mobile PPE interlock with offline GPS stamping
RBAC Offline-first PPE interlock
Presented as interactive prototypes in this package
📊
OEE · PTW · RCA engine
Interactive OEE formula simulator, 5-type Permit-to-Work with sequential multi-sig lock, and the 5-Why + Fishbone RCA engine with live PdM feedback loop
IATF 8.5.1.5 Weibull loop Immutable PTW
Presented as interactive prototypes in this package
Deployment model
Single-tenant isolation.

Every customer receives their own subdomain, application container, and fully isolated PostgreSQL instance in their chosen data centre region. No shared infrastructure. Audit-ready data residency certificates included.

DNS / CDN
*.siebencmms.com (wildcard DNS)
→
Cloudflare CDN + WAF
→
Per-tenant TLS certificate
Tenants
alstom.siebencmms.com
toyota.siebencmms.com
bombardier.siebencmms.com
bmw.siebencmms.com ↗ provisioning
Databases
pg-alstom-prod · JHB-AZ1
pg-toyota-prod · JHB-AZ2
pg-bombardier-prod · FRA-AZ1
Isolated · RLS enforced · SHA-256 hashed