FENECON Declaration on Information Security

This declaration serves to present the current status of information security in the company.

Although there are currently no formal certifications in accordance with ISO 27001:2024 and other standards, we are guided by the relevant norms and best practices. The measures are being implemented step by step with the aim of continuous further development and possible future certification.

FENECON is a leading hardware and software specialist for battery electric storage solutions in the residential, commercial and industrial segments and the only German manufacturer to produce and develop such an extensive range of battery storage systems in Germany.

All storage models are characterized by the self-developed energy management system FEMS, with which FENECON significantly shapes the world’s most successful open source energy management system OpenEMS. The numerous FEMS applications in the product portfolio enable grid- and energy-transition-friendly energy management and intelligent sector coupling.

As an expert in electrical energy storage and energy management, FENECON is among the strongest innovators in the industry and is committed to a future with 100 percent renewable energy. Its performance, flexibility and innovative strength have been confirmed by numerous awards:

As a German manufacturer that has been established in the German PV and energy market since 2011, has a lot of experience with foreign components and lives open source in many aspects (for example with an energy management system developed in-house), the topics of information security and data protection are very important to us. We welcome national and especially European regulations, as they create uniform rules on these topics.

As part of our growth and professionalization strategy, we are actively pursuing the official certification of our processes and measures.

Information security is an integral part of FENECON’s corporate strategy. The aim is to sustainably protect the availability, integrity and confidentiality of information and to minimize risks for customers, partners and the company.

Overall responsibility for information security lies with Deputy Managing Director Stefan Feilmeier, Bachelor of Business Informatics, Master of Computer Science (Embedded Systems).

We use OKRs (Objectives and Key Results) and a delegation matrix to implement the corporate strategy in the area of information security. The majority of tasks are performed centrally across the company in the "Shared Services" department of the "Internal Services" business unit.

The respective departments (e. g. IT, quality management, strategy) rely on their own staff and cooperation with external experts to ensure long-term quality and further development. Statutory and specialist officers are appointed and staffed by internal employees or external experts, e. g. data protection officer, quality management officer.

The Basic Audit took place in early 2025 and forms the foundation for an information security management system (ISMS). The audit included the areas of management, IT, digitalization & ERP system, FEMS (FENECON Energy Management System) and marketing (e. g. website).

The audit covers IT security management, virus protection, IT system safety, networking and internet, VPN & Wifi, content security, security requirements, patch management, passwords and encryption, emergency preparedness, data backup, infrastructure backup, mobile end devices, supplier management, mobile working, and cloud services.

The tasks identified in the audit were transferred to the departments concerned and are monitored by a regular IT security task force.

Certification in accordance with ISO 27001:2024 is planned and in preparation. Specific work on this was started following the successful audit for ISO 9001:2015 in June 2025. An ISMS manual is already being developed, an external consulting firm has been commissioned and workshops have been scheduled.

Employees are regularly sensitized regarding cybersecurity and data protection via the internal e-learning platforms "FENECON Academy" and Sam Secova. Particular attention is paid to software and hardware developers, system administrators and service technicians with elevated authorizations.

FENECON has always been working closely with universities, research institutes and market companions. In particular, the cooperation in the OpenEMS Association e.V. and with the active open source community around OpenEMS as the basis of FEMS enables independent control of software quality and code safety.
openems.io

Information security is an integral part of all FENECON hardware and software products and is systematically and uniformly taken into account in their design and further development.

The central element of all FENECON systems is the FENECON Energy Management System (FEMS), which is used in all products. It has proven its high stability and scalability over many years of use.

The FEMS platform comprises both the local energy management of the system in conjunction with other peripherals — e. g. measuring devices, analog and digital inputs and outputs, EV charging stations, etc. — and the cloud infrastructure operated by FENECON — for remote monitoring of operating states in real time, analysis of historical data, remote maintenance and provision of software and firmware updates.

Although we are not yet formally certified to ISO 27001, our day-to-day practice already meets the requirements of this and other standards in many areas. We are constantly reviewing which other standards we would like to have certified. FENECON is committed to the continuous development and improvement of information security!