Data Privacy and Security
in EnergyIP® MDM SaaS
Introduction to
EnergyIP® MDM SaaS
The EnergyIP Meter Data Management
(MDM) software works with your
smart meter environment to manage
your assets, process the meter data,
and monitor your system. The MDM
system is integrated with your CIS
(Customer Information System) and
AMI (Advanced Metering
Infrastructure) headend systems. It
imports and validates your data and
prepares it for billing.
The EnergyIP MDM SaaS (Software as
a Service) allows you to access and
use the EnergyIP MDM software
without needing to install it and
maintain it on your premise.
Confidential & Proprietary © Siemens AG, 2021
Siemens EnergyIP has been in the
market for over 20 years and has a
global footprint, complying with
complex security and data privacy
requirements and continuously
investing to make the product more
secure based on new deployment
models and regulatory environments.
EnergyIP was built as a true multi-
tenant system, and is proven in the
field in multiple instances around the
world, including several of which
have served over 50 different
companies on the same installation.
Siemens has been providing products,
solutions and services to the electric,
gas and water industries for decades,
and has made cybersecurity a top
priority. Siemens strives to meet or
siemens.com/energyip-saas
exceed best practices in security
across all its product lines, a task that
requires extensive ongoing
investment given the constantly
changing threat landscape. Siemens is
a member of various data privacy and
security standards organization
around the world and has a dedicated
Cybersecurity research community
within Siemens to advice and
implement secure systems and
products.
EnergyIP MDM was the first MDM in
the market certified to be GDPR
(General Data Protection Regulation
in EU) compliant and has built a
strong foundation to support any new
data privacy protection requirement
from other markets.
1. MDM SaaS on AWS Implements
Strong Data Security and Privacy
With EnergyIP MDM SaaS, we have
brought forward our proven MDM
system into the cloud by choosing the
best of the breed technology vendor
in AWS. EnergyIP has undergone the
rigorous AWS Well Architected Review
to maximize security among other
things. The AWS Well Architected
Review helps cloud architects build
secure, high-performing, resilient,
and efficient infrastructure for their
applications and workloads. Based on
five pillars — operational excellence,
security, reliability, performance
efficiency, and cost optimization —
AWS Well-Architected provides a
consistent approach for AWS
customers and partners to evaluate
architectures and implement designs
that can scale over time.
The security pillar focuses on
protecting information and systems.
Key topics include confidentiality and
integrity of data, identifying and
managing who can do what with
privilege management, protecting
systems, and establishing controls to
detect security events.
AWS is vigilant about data privacy.
You always own your data, including
the ability to encrypt it, move it, and
manage retention. All data flowing
across the AWS global network that
interconnects AWS datacenters and
regions is automatically encrypted at
the physical layer before it leaves
secured AWS facilities. Additional
encryption layers exist as well.
2. EnergyIP MDM SaaS Ensures Data
Privacy
EnergyIP MDM SaaS operates in the
AWS environment using modern,
state-of-the-art industry technology
stack.
The MDM SaaS operates as a shared
schema multi-tenancy model where
different customers are served a
standard functionality on the same
installation while ensuring data
segregation to maintain data security
and data privacy for each
customer/tenant.
Each customer interacts with MDM
SaaS through a secure VPN and
Amazon Private Link through which all
application and interface access is
provided.
For the exchange of data files, each
customer is provided with dedicated
SFTP (Secure File Transfer Protocol)
access. The SFTP for each customer
connects with an Amazon S3 bucket
that is also dedicated to a single
customer, and no other customer can
access that bucket.
Further, storage of customer specific
data is tightly encapsulated within a
“Org” model as follows:
• Customer data is managed in
EnergyIP by organizational
grouping called “Org”
• The access and visibility of data is
built around this Org concept
• Each entity refers to a specific Org
and is owned by the Org
• Users belonging to the same Org
have access only to their data,
thus separating data privacy and
security by Org (Tenant)
• Asset information belonging to a
particular Org, like Service
Delivery Points, Meters,
Customers, and Premise, are only
visible to the users belonging to
that Org
• Users from a specific Org cannot
access or view data from any other
Orgs

Published by
Siemens AG
Smart Infrastructure
Digital Grid
Humboldtstr. 59
90459 Nuremberg
Germany
For the U.S. published by
Siemens Industry Inc.
100 Technology Drive Alpharetta
GA 30005
United States
For more information, please contact our
energyip_customer_support.us@siemens.com
©Siemens 2021
Subject to changes and errors.
The information given in this document only contains general descriptions and/or performance
features which may not always specifically reflect those described, or which may undergo
modification in the course of further development of the products. The requested performance
featuresare binding only when they are expressly agreed upon in the concluded contract.
EnergyIP® is a registered trademark of Siemens AG.
Any unauthorized use is prohibited.
All product designations, product names, etc. may contain trademarks or other rights of Siemens
AG, its affiliated companies or third parties. Their unauthorized use may infringe the rights of the
respective owner.

Confidential & Proprietary © Siemens AG, 2021