About
A complete platform, built to last and to defend
HVACR Passport isn't a prototype. It's a deployed, multi-tenant platform covering the full HVAC unit lifecycle — with an architecture and a security foundation built to the standard a serious operator would demand.
Why it's defensible
The moat is in the architecture
Not a single feature, but a set of decisions that are hard to copy and even harder to retrofit.
Multi-manufacturer from day one
Strict per-tenant isolation isn't bolted on — it's the architecture. Onboard another manufacturer with no rework, while dealers work every authorized brand in one portal.
The audit trail is a product
A complete, immutable history of every action — actor, IP, timestamp, before/after — that's directly valuable for warranty disputes, recalls, and channel audits in an audit-heavy industry.
One URL, two carriers
A single unit identity in both QR and NFC, bound on first scan with replacement history — durable in the field where printed-only codes fail.
A parts model that fits the channel
Parts are owned by a manufacturer or a distributor — never both — with a visibility matrix that lets competitors coexist without leaking relationships.
Unit-aware AI diagnostics
Context-aware troubleshooting tied to a specific unit's model and service history — a differentiator that's hard to retrofit onto a legacy system.
Enforced data integrity
The lifecycle state machine refuses invalid moves server-side, so the data stays trustworthy — the foundation everything else depends on.
Security & compliance
Built to the standard your team would ask for
The technical foundation for a formal compliance program is already in place — the operational policy layer slots in under an acquirer's existing program with no architectural rework.
Zero-trust access
Role-based access control with strict tenant isolation — no application role can see across manufacturers.
Complete audit logging
Every state change is logged with actor, IP, timestamp, and state diff, and the trail is immutable.
Modern authentication
JWT with short-lived access tokens, refresh-token rotation and blacklisting; tokens in encrypted, HTTP-only cookies.
Reviewed against OWASP
Architecture reviewed against the OWASP Top 10, with encryption in transit and at rest across every endpoint.
Acquisition-ready
Deployed, portable, and ready to scale
This is a system you can inherit and run, not a slide deck.
Cloud-portable infrastructure
Fully containerized and deployable to AWS, GCP, or Azure, with enterprise security at the edge.
In market and multi-tenant
Live and in testing across manufacturer, dealer, consumer, and mobile surfaces — built to onboard more brands without rework.
Patent pending
The core approach is covered by a pending patent application held by our founding partner — a defensible foundation for whoever takes it to market.
FAQ
Questions, answered plainly
- What is HVACR Passport?
- HVACR Passport is a supply-chain and warranty-management platform that tracks each HVAC unit across its entire lifecycle — manufacturing, quality inspection, distribution, installation, warranty, and homeowner ownership — on a single shared record.
- Who uses HVACR Passport?
- Manufacturers, distributors, contractors, and homeowners. Each gets a purpose-built app — a manufacturer portal, a unified dealer portal for distributors and contractors, a consumer web app, and native mobile apps for homeowners and for contractors in the field — all reading and writing to one source of truth.
- How does warranty tracking work?
- Warranty starts automatically on the installation date and is calculated per model. Homeowners see live warranty status and remaining coverage, and warranty work is flagged separately from paid service in the unit's record.
- How is it different from inventory or CRM software?
- HVACR Passport tracks individual units by serial through an enforced lifecycle state machine with a complete, immutable audit trail. That chain of custody — plus QR/NFC tags, automatic warranty, and a digital parts flow — is what makes the record trustworthy for warranty disputes, recalls, and channel audits.
- Does it support multiple manufacturers?
- Yes. Multi-manufacturer support is built in from day one. Each manufacturer's data is fully isolated, dealers link to brands through a private dealer code rather than a global directory, and a distributor or contractor can work every authorized brand from one portal.
- Is HVACR Passport production-ready?
- Yes. It is a deployed, multi-tenant platform — fully containerized and cloud-portable, with role-based access control, complete audit logging, and an architecture reviewed against the OWASP Top 10.
- How does HVACR Passport keep data secure?
- Security is built into the architecture: every request is authenticated with short-lived, rotating JWT tokens; access is least-privilege across ten roles; data is strictly isolated per manufacturer; traffic is encrypted with TLS 1.3 behind Cloudflare; the database is never exposed to the public internet; and every change is recorded in an immutable audit trail. The application is reviewed against the OWASP Top 10.
- What happens in the event of a data breach?
- The design limits the blast radius. A compromised account is confined to a single tenant and role and cannot reach data across manufacturers; short-lived access tokens expire fast and can be revoked immediately; and the immutable audit trail makes unusual activity traceable. Secrets are kept out of the codebase and the database is unreachable from the public internet.
Let's talk
Whether you want a walkthrough of the platform or a deeper conversation about acquisition, we'll set up a session that fits.