Skip to content
C. Celaya
← Work
LIVEClient buildShipped RISER
The question

Can building heat be controlled from the cloud without depending on it?

The system

RISER

Heating control for centrally heated buildings. Clip-on sensors feed a wall-mounted controller that holds the safety logic on site, so the heat stays on when the internet does not.

Sector
Property operations and central heating
Role
Client build. Edge control, sensor fleet, cloud console.
Read
4 min read

Safety logic runs on site, not in the cloud. A one-day wireless install, no pipe cutting, no downtime.

A boiler in a centrally heated building usually knows one thing: the water temperature at the boiler.

It does not know what the weather is about to do. It does not know what the return water looks like, which is the only honest signal about whether the building actually needed that heat. It does not know that the flue has been reading high for a week. It fires on a curve somebody set at commissioning, and it keeps firing on that curve for years.

RISER is heating control for that building. Clip-on sensors on supply, return, pressure, and flue. A wall-mounted controller. Outdoor reset combined with the weather forecast, so the boiler trims its runtime ahead of a warm afternoon instead of finding out about it later.

The decision the whole product rests on

Every interlock lives on the wall controller.

Not in the cloud console. Not in a rule somebody wrote in a dashboard. On the wall, in the building, on the same side of the network as the boiler it protects.

I spent twelve years on industrial floors, and this is the lesson that transfers most cleanly: the connection will drop. Not might. Will. A carrier changes something, a site loses power for four hours, a tenant unplugs the wrong box, somebody puts a new firewall in front of the building and nobody tells you. Any of it takes the cloud away for a while.

So the question is never "how do we keep the link up." It's "what does this thing do at three in the morning in January when the link is gone." If the answer involves a round trip to a server, the design is wrong, and the day it's wrong is the coldest day of the year in a building full of people.

RISER answers it locally. The cloud is where you look at the fleet, not where the fleet gets its safety. Lose the connection and the building keeps heating correctly; you just stop seeing it for a while. That is the correct failure, and it is the one worth engineering for.

Installed without cutting anything

The sensors clip on. No pipe cutting, no draining, no downtime, a one-day wireless install.

That sounds like a convenience feature and it isn't. It's what makes the thing deployable at all. A retrofit that requires a shutdown needs a scheduled outage, a contractor, a tenant notice, and somebody's approval, and by the time all four line up the season has changed and the budget is gone. Clip-on sensors turn a capital project into an afternoon. The number of buildings you can reach goes up by an order of magnitude, and nothing about the control logic had to get worse to get there.

What the operator gets

The people who run these buildings are not looking for a data platform. They have a portfolio and a phone.

  • One dashboard across the fleet, not one login per building
  • Alerts ranked by severity, with an acknowledgment, so a real problem does not sit behind forty notifications about nothing
  • Monthly fuel per building, export ready, because the report is what justifies the spend to whoever signs
  • Roles that separate an operator from a viewer
  • An audit trail, so a change has a name and a timestamp on it
  • Support in English and Spanish, around the clock

That last one is not a nice touch. The person standing in the boiler room at 2am is often not the person who bought the system, and if the support line does not work in the language they think in, the system does not work.

RISER's own reporting puts fuel savings at 20 to 25 percent, with one property, Parkview Estates, at 23 percent, and control uptime at 99.9. Those are the operator's numbers, measured against their own baseline. What I can speak to is the architecture that produces them: a boiler that stops firing into weather that hasn't arrived yet, and interlocks close enough to the equipment that nothing on the network can take them away.

Why this generalizes

Any system where software touches equipment that can hurt somebody or cost real money has the same split. Decide what has to be true when the connection is gone, and put exactly that on site. Everything else can live upstream.

Get the split wrong and you have built a very good dashboard attached to a building that goes cold.

If your problem has this shape, say so in three sentences and I will tell you plainly whether it fits.

Email hello@celayasolutions.com ↗