Skip to main content

PRODUCT & SOLUTION CATALOG · 2026

From Signal to System,
to Industrial Intelligence.

RF, automation and AI engineering since 1988. Ankara, Türkiye.

elmesbilisim.com · elmes.io · info@elmeselektronik.com · +90 (312) 395 85 86

01 · Products

RF & Wireless Systems

From crane and machine control to well-tank, fire, patrol and call systems: field-proven wireless control families on licence-free bands.

TXI-VK200 / RXO-RT207-27D-6AN

Wireless Crane Control System

Encrypted RF link, millions of operations in the field.

The problem in the field. On overhead cranes, a pendant control ties the operator to the area under the load and to the line of travel; festoon cable systems suffer from breaks, crushing and connection faults, and every fault means a production stop. Imported wireless remotes come with a fixed button layout, special functions (analog speed, extra relays, interlocks) cannot be added, and service is abroad. When several cranes work in the same plant, remotes triggering each other is a safety risk.

The solution. The Elmes crane control system carries commands from a handheld or belt-pack transmitter to the receiver in encrypted RF packets; the receiver's relay contacts connect directly to the contactors or drives. Every system has a unique ID, so transmitters with a different ID cannot affect the receiver. The emergency stop command is processed with priority; if the link drops or the battery runs out, the receiver releases its relays to a safe state. The operator controls the load from wherever they see it best.

Customization. 6–32 channels, two-speed buttons, joystick/analog speed, analog 0/4–20 mA and 0–10 V outputs (up to a receiver with 27 digital + 6 analog outputs), latch/momentary selection and reverse-button protection are configured per application. For non-crane machines such as concrete pumps, horizontal lifts and doors/barriers, the same hardware is offered as Wireless Machine Start & Control.

Features

  • Emergency stop (E-Stop): mushroom button on the transmitter; a priority command that opens all relays on the receiver.
  • Two-speed buttons: low/high speed with a two-stage press.
  • Analog / joystick control: analog or digital joystick; 0/4–20 mA and 0–10 V analog transfer; 6 analog outputs on the receiver.
  • Latch / momentary selection: latching or hold-to-run operation per channel.
  • Pilot relay and reverse-button protection: opposite-direction interlock; forward and reverse cannot run at the same time.
  • On/off lock: key-switch or code-protected start.
  • Automatic signal cut-off on low battery plus charge/transmit LEDs.
  • OLED display: optional.
  • Multiple transmitters: more than one remote can be paired to the same receiver.
  • TargetOn-screen status: RSSI, battery and active channel display.
  • TargetSingle active remote lock: with multiple transmitters, a hand-over protocol keeps only one remote in control at a time.
  • TargetDual-channel E-Stop path: separate safety relay with monitoring and an EN ISO 13850 button.
  • TargetAutomatic channel switching: keeps the link alive by changing channels in noisy environments.
  • TargetDual battery: a spare battery for uninterrupted operation.
  • TargetOverload protection module: a wireless load-cell transmitter that locks the hoist channel when the load limit is exceeded.
  • TargetMotion detection: automatic stop via accelerometer if the transmitter is dropped or turned over.
  • TargetFunctional safety: EN ISO 13849-1 PL d / IEC 62061 SIL 2 for the E-Stop path.

System components

System components
Model codeComponentDescriptionRequest a quote
TXI-VK200Handheld / belt-pack transmitter6, 8, 10, 16, 24 or 32 channels; emergency stop; two-speed button and joystick optionsRequest a quote: TXI-VK200
RXO-RT207-27D-6ANReceiverUp to 27 digital + 6 analog outputs; relay contacts wired to contactors/drivesRequest a quote: RXO-RT207-27D-6AN

Specifications

Current system
Frequency433 MHz ISM band; no frequency licence required
Control channels6 / 8 / 10 / 16 / 24 / 32
Receiver outputsUp to 27 digital + 6 analog outputs
Analog signal0/4–20 mA, 0–10 V
System ID65,000 unique IDs
Radio (new series)
Frequency band433.05–434.79 MHz, 8 channels; 868 MHz as an option onlyTarget
RF channels8 (200 kHz spacing)Target
Output power+22 dBm, adjustable; within ETSI limitsTarget
Receiver sensitivity−129 dBm @ SF11/BW125 (chip datasheet)Target
ModulationLoRa SF7–SF9 (SF7 for low latency)Target
Data rate~5.5 kbps at SF7Target
Antenna connectoru.FL / SMATarget
Range
Open field≥ 1000 m (SF7, 2 dBi antenna, 2 m height)Target
Industrial environment≥ 150 m indoorsTarget
Communication & security
EncryptionAES-128-CCM + counter (replay protection)Target
Addressing16-bit network ID + 16-bit address + device UIDTarget
PairingAt the factory and in the field with a service toolTarget
Systems on the same site≥ 8 independent networks (channel × network ID)Target
Performance & fail-safe
Command latency≤ 50 msTarget
Fail-safe on link loss≤ 500 ms, adjustableTarget
WatchdogIndependent hardware watchdog (IWDG)Target
Power
Receiver supply9–36 VDC; 230 VAC optionTarget
Receiver consumptionDepends on the number of relays
Transmitter batteryLi-ion 3.7 V, replaceable packTarget
Continuous operation≥ 48 hoursTarget
Charging time≤ 4 hoursTarget
Inputs / outputs
Relay outputs8 / 16 relays; dedicated carrier board for the 27 + 6 class; 5 A / 250 VACTarget
Analog outputs2 (carrier board); 6 with an add-on boardTarget
CommunicationRS485 / Modbus RTU optionTarget
Mechanical & environmental
Receiver enclosureDIN-rail housingTarget
Transmitter housingIndustrial polycarbonateTarget
Ingress protectionIP65 transmitter, IP65 receiver boxTarget
Operating temperature−20…+60 °C transmitter (battery), −25…+70 °C receiverTarget
Humidity5–95 %, non-condensingTarget
Warranty & service
Warranty2 years; repair and spare parts in Ankara
Spare-parts support5 yearsTarget
Hardware

Wireless Machine Start & Control

Crane-proven remote control, for every machine.

The problem. On machines such as concrete pumps, sandblasting booths, horizontal lifts and mobile pumps, the operator needs to be away from the machine, wherever the work can be seen: at the boom tip, outside the booth, on the platform. Wired controls (coiled cables, pendant stations) break, snag, restrict movement and cause accidents. Off-the-shelf imported industrial remotes are expensive, closed to channel and logic customization, and serviced abroad. Cheap 433 MHz remotes, on the other hand, lack industrial safety features (emergency stop, defined link-loss behavior, interference protection).

The solution. The transmitter (membrane/buttons/joystick) and receiver (relays + analog outputs) hardware of the Wireless Crane Control System platform is configured for each machine: a 24-channel concrete pump remote, an 8-channel + emergency stop general-purpose remote, a single receiver with 10 transmitters, proportional drive with a joystick, single-channel pump start/stop. The receiver relays drive contactors or PLC inputs; if communication is lost, the relays drop out (safe state), and the emergency stop is handled with priority through a separate relay. Multiple machines on the same site are separated by channel and ID.

New series. The roadmap standardizes the receiver on DIN rail with the Elmes Module Series and EC carrier boards (EC-DIO8/16), moves the transmitter to a new platform, and adds encryption and OTA updates.

Features

  • Machine-specific control layout: 24-channel concrete pump (boom, flow, emergency stop), 8 channels + emergency stop, proportional joystick control; button labels per customer.
  • Emergency stop relay: a separate safety relay; link loss and emergency stop are handled with distinct behaviors.
  • Many transmitters → one receiver (10:1): start or call commands from different points.
  • Interlocks and two-speed control: forward/reverse and up/down interlocking; stepped speed bits.
  • Latching / pulse relay modes: for start/stop type machines.
  • Timer and pump modes: single-channel start/stop, timed operation.
  • TargetSafety relay module: EN ISO 13849-1 PL level for the emergency stop path with a safety relay module.
  • TargetTransmitter logging: the receiver logs which transmitter issued each command.
  • TargetEncrypted link and OTA: AES-128 + network ID (NetID), over-the-air firmware updates.
  • TargetDIN-rail receiver and Modbus: DIN-rail receiver on EC-DIO8/16 carrier boards, Modbus RTU slave interface.
  • TargetOperator feedback and protection: RSSI indicator, stuck-button protection.
  • TargetRechargeable transmitter and 868 MHz option: Li-ion rechargeable transmitter; an 868 MHz version as an option.

Application variants

Application variants
Model codeTransmitterReceiverApplicationStatusRequest a quote
MK-2424-channel membrane (TXI-VK200 based)24 relays (RT207 based)Concrete pump (boom, speed, emergency stop)In the fieldRequest a quote: MK-24
MK-8ES8 channels + emergency stop8 relays + emergency stop relayGeneral machinery, sandblastingIn the fieldRequest a quote: MK-8ES
MK-YAHorizontal lift remoteRelays + limit inputsHorizontal lift / platformIn the fieldRequest a quote: MK-YA
MK-10T1R10 push-button transmitters1 receiverMachine call / start from multiple pointsIn the fieldRequest a quote: MK-10T1R
MK-JOYJoystick / potentiometer transmitterAnalog + relay receiver (RT207, 6 analog outputs)Proportional drive (pump flow, non-crane)In the fieldRequest a quote: MK-JOY
MK-PMP1–2 channel start/stop1–2 relaysPump / compressor / DC motorIn the fieldRequest a quote: MK-PMP
MK-TMR—220 V timer relayTimed operationIn the fieldRequest a quote: MK-TMR
MK-N3-xxTargetNew-series transmitter (6/8/16/24 channels)EM-G0L + EC-DIO8/16All applicationsPlannedRequest a quote: MK-N3-xx

Specifications

Current system
Frequency433 MHz ISM band (433.056 MHz)
Modulation2-FSK / GFSK
Output power≤ +10 dBm
Receiver sensitivity~−104 dBm @ 2.4 kbps (approx.)
AntennaTransmitter: internal / helical; receiver: external SMA
CodingSystem ID + CRC
PairingID written at production (with a programming tool)
WatchdogMicrocontroller hardware watchdog (WDT)
Radio (new series)
Frequency band433.05–434.79 MHz, 8 channels; 868 MHz as an option onlyTarget
RF channels8Target
Output power+22 dBmTarget
Receiver sensitivity−129 dBm @ SF11 (chip datasheet)Target
ModulationLoRa SF7–SF9 (low SF for low latency)Target
Range
Open field≥ 1000 m (SF8)Target
Industrial environment≥ 200 mTarget
Communication & security
Rolling codeRolling-code packet validationTarget
EncryptionAES-128 + counterTarget
Addressing16-bit ID; network ID (NetID) + 16-bit address in the new seriesTarget
Field pairingWith a service toolTarget
Systems on the same site≥ 8 independent networks (channel × network ID)Target
Performance & fail-safe
Emergency stopSeparate relay, priority packet; latches and is released by reset
Command latency< 50 ms (SF7, short packet)Target
Fail-safe on link loss0.5–2 s, adjustableTarget
Watchdog (new series)Independent hardware watchdog (IWDG)Target
Power
Receiver supply12/24 VDC or 220 VAC (to order); consumption depends on the number of relays, ~70 mA per relay @ 12 V
Transmitter powerBattery-powered
Transmitter battery (new series)Rechargeable Li-ion; at least 1 shift of operationTarget
Inputs / outputs
Relay outputs6–32 channels (24 relays + 3 digital outputs on the RT207 receiver)
Relay outputs (new series)EC-DIO8 (8 relays) / EC-DIO16; 24+ channels with multiple boards; 5 A / 250 VACTarget
Analog outputs6 analog outputs on the RT207 receiver (joystick / potentiometer)
Analog outputs (new series)EC-AIO: 2 × 4–20 mA / 0–10 VTarget
Receiver digital inputsLimit and feedback inputs (horizontal lift)
Digital inputs (new series)EC-DIO8: 8 digital inputsTarget
CommunicationRS485 / Modbus RTU slaveTarget
Mechanical & environmental
Transmitter housingHandheld membrane remote
Transmitter ingress protectionIP65Target
Receiver enclosureMetal or plastic box (RT207)
Receiver enclosure (new series)DIN-rail housingTarget
Operating / storage temperature−20…+60 °C / −30…+70 °CTarget
Warranty & service
Warranty2 years; service in Ankara
Spare-parts support5 yearsTarget
Hardware

Wireless Digital I/O Link — 8 Channels

8 relays, 8 inputs — replace the cable with RF.

The problem. Carrying a few dry contacts between a pump and a tank, a machine and its control panel, a barrier and a guard booth, or a valve and a control room normally means pulling cable: trenching, conduit, road or stream crossings, third-party land, and the risk of lightning and breaks. In most applications the information is just 1–8 bits (full/empty, run/stop, open/closed, fault), yet cable costs and permits inflate the project. GSM/IoT solutions add subscriptions, cloud dependency and latency, which is overkill for a simple level control.

The solution. The Wireless Digital I/O Link carries digital signals over RF between two (or more) endpoints. A contact change at the input end immediately switches the relay at the far end; periodic status refreshes keep the link continuously verified. If communication is lost, the relays drop to a defined safe state (for example, the pump stops). To a PLC, the link looks like an I/O card shared by both panels: input terminals on one side, relay contacts on the other.

Generations. The ELD100 generation in the field delivers kilometer-class range with LoRa. The new series is planned to offer the same function on DIN rail with the EM-G0L-433 module and the EC-DIO8 carrier board, in 433 MHz and optional 868 MHz versions.

Features

  • Defined safe state: open / close / hold selectable per relay on link loss; optional “link fault” relay.
  • Float / contact filter: an adjustable delay that prevents false triggering from fluctuating level floats; proven in the field on the ELD100 generation.
  • Periodic refresh + event transmission: low airtime, high reliability.
  • Production tooling: ID/channel programming and automated testing at production.
  • TargetRole selected by firmware: the same board works as a transmitter, receiver, bidirectional endpoint or repeater.
  • TargetService tool and fixture: field pairing and testing with the Module Programming/Test Fixture + SDK Package.
  • TargetSecurity and maintenance: AES encryption, network ID (NetID), OTA updates, RSSI reporting and LED indication.
  • TargetModbus RTU slave: link status and I/O states readable by a PLC.
  • TargetBattery transmitter and 868 MHz options: a battery-powered transmitter for contact monitoring only; an 868 MHz version.
  • TargetMixed systems and counter mode: runs on the same network as the analog sister board (Wireless Analog & Digital Data Link, EC-AIO); an input counter mode for pulse counting (Wireless Meter Reading Node).

Variants

Variants
Model codeRoleInputsOutputsSupplyStatusRequest a quote
ELD100 (MODM0-ELD100)Bidirectional / receiver8 digital inputs8 relays12–24 VDCIn the fieldRequest a quote: ELD100 (MODM0-ELD100)
DIO8-TXTargetTransmitter (input end)8 opto-isolated inputs— (status LED)9–36 VDCPlannedRequest a quote: DIO8-TX
DIO8-RXTargetReceiver (output end)—8 relays, 5 A9–36 VDCPlannedRequest a quote: DIO8-RX
DIO8-BITargetBidirectional8 opto-isolated inputs8 relays9–36 VDCPlannedRequest a quote: DIO8-BI
DIO8-TX-LPTargetBattery transmitter (contact monitoring)8 inputs (wake-up)—BatteryPlannedRequest a quote: DIO8-TX-LP
DIO8-REPTargetRepeater (same hardware, firmware profile)——9–36 VDCPlannedRequest a quote: DIO8-REP
DIO16 (EC-DIO16)TargetExtended variant16 digital inputs8 relays9–36 VDCPlannedRequest a quote: DIO16 (EC-DIO16)

Specifications

Current system (ELD100)
GenerationELD100 (N2), in the field
Frequency433 MHz ISM band, LoRa (SX1268)
Inputs / outputs8 digital inputs, 8 relay outputs
Supply12–24 VDC
PairingID and channel programmed at production
Radio (new series)
Frequency band433.05–434.79 MHz, 8 channels; 868 MHz as an optionTarget
Output power+22 dBmTarget
Receiver sensitivity−129 dBm @ SF11/BW125 (chip datasheet)Target
ModulationLoRa SF7–SF12; packets < 20 bytesTarget
Antenna connectorOn-board female SMA, 50 ΩTarget
Range
Open field≥ 2000 m (SF9, 2 dBi omni antenna, 2 m height)Target
Industrial / indoor≥ 300 mTarget
Communication & security
Encryption and addressingAES-128-CCM; network ID (NetID) + 16-bit address; replay counterTarget
Field pairingWith a service toolTarget
Systems on the same site≥ 8 (channel × network ID)Target
Performance & fail-safe
Command latency< 100 ms @ SF7; < 500 ms @ SF10Target
Fail-safe on link lossAdjustable 5–300 s timeoutTarget
WatchdogIndependent hardware watchdog (IWDG)Target
Power
Supply9–36 VDC; reverse-polarity and TVS protectionTarget
ConsumptionStandby ~30 mA @ 12 V; all 8 relays energized +~560 mA @ 12 V (~70 mA per relay); transmit peak +120 mA @ 3.3 VTarget
Battery transmitter (TX-LP)2 × AA / Li-SOCl2; sleep < 10 µA; battery life depends on the number of transmissionsTarget
Inputs / outputs
Digital inputs8 × opto-isolated; 12–24 V or dry contact (with internal 12 V supply); 3 mA; 10 ms filter + adjustable float filterTarget
Relay outputs8 × relay NO/NC, 5 A / 250 VAC, varistor-protectedTarget
Service interfaceUART / SWD
Field communicationRS485 (with the EC-485 board); Modbus RTU slave for I/O read-out by a PLCTarget
IndicatorsPower, link, TX/RX, 8 × input and 8 × relay LEDsTarget
Mechanical & environmental
Housing35 mm DIN rail, 6 modules (~108 mm)Target
Ingress protectionIP20 (in-panel); IP65 enclosure option for outdoor useTarget
Operating / storage temperature−25…+70 °C / −40…+85 °CTarget
Humidity5–95 %, non-condensingTarget
Warranty & service
Warranty2 yearsTarget
Spare-parts support5 yearsTarget
Manufacturing and serviceAnkara
FRS-BB / FRS-GATEWAY / FRS-B-BOX-R1

Wireless Fire Alarm System (Firesens)

Cable-free, flexible fire detection for industrial sites and sites with special requirements.

The problem in the field. In operating factories, heritage buildings, large warehouses and open sites, running a wired fire detection loop halts production, damages the structure and is expensive. Standard conventional/addressable panels raise the alarm, but site-specific actions (lock a door, shut off ventilation, trigger a specific extinguisher) require an extra PLC and more cabling. In solvent, paint and dusty environments, a single type of detector produces false alarms or reacts too late.

The solution. Firesens connects battery-powered or 24 V wireless end devices (smoke/heat sensors, buttons, sirens, relay output units) to the gateway and panel over LoRa 433 MHz. The panel, PC application and map HMI show every device with its location, battery, temperature and signal strength; on alarm, siren, door and extinguisher outputs are triggered according to the scenario. Thanks to two-way communication, the panel sends commands and each device acknowledges them. Installation is carried out in the running plant without stopping production.

For sites with special requirements. Firesens is not a replacement for a legally mandated fire detection system; it is positioned as an additional, special-purpose protection layer for industrial sites and sites with special requirements, and is evaluated project by project. The smoke/heat sensor is EN 54-7 self-declared; EN 54-25 (wireless components) certification is planned. The roadmap covers early warning based on threshold and trend analysis across several sensor types (optical smoke, temperature, rate-of-rise, gas), BMS/SCADA integration over Modbus TCP, and a new version of mobile notifications.

Features

  • Linked door control: locks/unlocks doors and monitors door status according to the alarm scenario (relay unit + magnetic contact).
  • Extinguisher triggering: triggers the site's own extinguishing unit (gas, foam, sprinkler pre-control) based on sensor data, with double confirmation and a delay.
  • Map-based HMI: device status on the site plan on a 7-inch display; the same view in the PC application.
  • Device health reports: battery, temperature and RSSI from every device.
  • Two-way communication with acknowledgment: each device acknowledges panel commands (ACK).
  • Dry-contact integration: the relay unit connects to a zone input of an existing panel.
  • Multilingual panel: Turkish / English interface.
  • TargetMulti-sensor fusion and early warning: cross-checking data from different sensor types, trend analysis (rate of temperature rise, smoke density), a pre-alarm level.
  • TargetExtinguishing control logic: double-confirmation and delay logic modeled on the EN 12094-1 approach; certification is not in scope.
  • TargetBMS/SCADA integration: Modbus TCP.
  • TargetMobile app / notifications: a new version of alarm and fault notifications.
  • TargetOptional modules: gas sensor node, outdoor siren, 4G backup link, cloud monitoring (Telemetry & Process Intelligence), portable notification unit (WR-001 LoRa Wireless Alarm / Call Remote), repeater.

System components

System components
ComponentTypeDescriptionStatusRequest a quote
—Smoke / heat sensorOptical smoke and heat detection; battery-powered; battery, temperature and RSSI reporting; EN 54-7 self-declaredIn the fieldRequest a quote: Smoke / heat sensor
—Standard call pointWireless manual fire alarm buttonIn the fieldRequest a quote: Standard call point
—Break-glass call pointWireless call point activated by breaking the glassIn the fieldRequest a quote: Break-glass call point
—SirenWireless siren; zone-based triggering according to the alarm scenarioIn the fieldRequest a quote: Siren
—PanelCentral panel; 7-inch map HMI, Turkish / English interface; PC applicationIn the fieldRequest a quote: Panel
FRS-GATEWAYGatewayConnects end devices to the panel over LoRa 433 MHzIn the fieldRequest a quote: FRS-GATEWAY
FRS-PSPower supply24 VDC with battery backup for the panel and sirensIn the fieldRequest a quote: FRS-PS
—Relay output unitDoor, ventilation and extinguisher control; dry contact to an existing panelIn the fieldRequest a quote: Relay output unit
—TargetGas sensor nodeGas detection for multi-sensor fusionPlannedRequest a quote: Gas sensor node
—TargetOutdoor sirenIP54 outdoor variantPlannedRequest a quote: Outdoor siren
—TargetRepeaterRange extension with an extra hop on large sitesPlannedRequest a quote: Repeater

Specifications

Current system
RadioLoRa 433 MHz; two-way, command–acknowledge
End-device powerBattery or 24 VDC
Panel / siren supply24 VDC + backup battery (FRS-PS)
Device monitoringBattery, temperature and RSSI from every device
Central interface7-inch map HMI and PC application; Turkish / English
IntegrationDry contact via the relay unit
Radio (new series)
Frequency band433.05–434.79 MHz, 8 channels; 868 MHz as an optionTarget
Output power+22 dBm; within ETSI duty-cycle limitsTarget
Receiver sensitivity−129 dBm @ SF11/BW125 (chip datasheet)Target
ModulationLoRa SF9–SF11Target
Data rate0.5–1.8 kbps depending on SFTarget
Antennau.FL or internal PCB antenna on sensors; SMA on the gatewayTarget
Range
Open field≥ 2000 m (SF11, 2 m height)Target
Indoor / industrial≥ 300 m; extendable with repeatersTarget
Communication & security
EncryptionAES-128-CCMTarget
Addressing16-bit network ID + 16-bit address + device UIDTarget
PairingAt the factory and in the field from the panelTarget
Systems on the same site≥ 8 networks (channel × network ID)Target
Performance & fail-safe
Alarm transmission delay≤ 2 s (end device → panel)Target
Heartbeat report interval1–15 min, adjustableTarget
Missing-device detection3 report intervalsTarget
WatchdogIndependent hardware watchdog (IWDG)Target
Measurement
Detection principleOptical + thermal + rate-of-rise; gas nodeTarget
Sensitivity settingThreshold profiles set from the panelTarget
False-alarm preventionDual-sensor confirmation, delay windowTarget
Power
End-device batteryLi-SOCl2 / 2 × AA; sleep < 10 µATarget
Battery life≥ 3 years @ 15 min report interval (calculated + measured)Target
Gateway supply9–36 VDC / PoETarget
Inputs / outputs
Output typeRF + 8-relay output unit (EC-DIO8)Target
Relay / input unitEC-DIO8: 8 digital inputs / 8 relays, 5 ATarget
Panel interfacesEthernet, USB, 4G, Modbus TCPTarget
Mechanical & environmental
Sensor ingress protectionIP33Target
Call point ingress protectionIP44Target
Siren ingress protectionIP54 (outdoor variant)Target
PanelDIN-rail cabinet + 7-inch HMITarget
Operating temperature−10…+55 °CTarget
HumidityUp to 95 %, non-condensingTarget
Warranty & service
Warranty2 years
Manufacturing and serviceAnkara
ELC402

Wireless Patrol Control System

Button-based patrol and alarm control for military and civilian sites; RFID checkpoints optional.

The problem in the field. On large sites, guard posts are far from the control room; radio calls carry no identity or location, and running wired alarm lines is costly and open to sabotage. Whether a guard is on duty and alert usually cannot be verified, and after an incident there is no record of who, when and where.

The solution. The system is button-based: each guard post gets a wireless device (ELC402) with Attack, Fire and Check-in buttons. When a button is pressed, the alarm type and location appear instantly on the central panel, and the sirens and alarm contact are triggered according to the scenario. Check-in supervision prompts the guard at a set interval (e.g. 30 min); if the check-in button is not pressed within 1 minute, the control room is alerted. Once the duty roster is entered, the personnel on duty at the time of an alarm are logged.

Expansion. RFID checkpoints are optional: with an RFID card or fingerprint reader, check-ins can only be made by authorized personnel. In the Professional tier, alarm and personnel information is shown on a dynamic site plan. The roadmap covers PC/mobile monitoring and reporting, GSM/4G backup notifications, the WR-001 portable notification unit for the response team and, in the longer term, a BLE/UWB-based real-time location (RTLS) layer.

Features

  • Three-button alarm/check-in device (ELC402): Attack, Fire, Check-in; each alarm type has its own color/sound at the control room and its own siren assignment.
  • Check-in (alertness) supervision: adjustable interval and tolerance time; missed check-in alarm and log.
  • Duty log / roster: personnel on duty are logged at the time of an alarm (Smart and Professional tiers).
  • Independent wireless sirens: placed in any zone, with a selectable alarm assignment; audible and visual.
  • Dynamic site plan / map: alarm and personnel information on the site plan in the Professional tier.
  • RFID checkpoint (optional): hardware-ready; restricts check-ins to authorized personnel; fingerprint reader option.
  • Alarm contact output: dry contact to PLCs, auto-diallers and other security systems.
  • Solar power: for guard posts without mains power.
  • TargetOperations center software: a PC-based monitoring center application.
  • TargetPC and mobile monitoring: status monitoring, alarm notifications and reports for authorized users.
  • TargetGSM/4G backup notifications: SMS or calls from the control room via the Cellular Module 4G/NB-IoT (EM-G0C).
  • TargetPortable notification unit: alarms to the response team with the WR-001 LoRa Wireless Alarm / Call Remote.
  • TargetRTLS expansion: patrol location with BLE/UWB tags; a new layer rather than a direct upgrade of the current hardware.

System components

System components
Model codeComponentDescriptionStatusRequest a quote
ELC402Guard post deviceAttack, Fire and Check-in buttons; wirelessIn the fieldRequest a quote: ELC402
—Central panelAlarm type and location display; duty log; dry-contact alarm outputIn the fieldRequest a quote: Central panel
—Wireless sirenAudible and visual; assigned by zone and alarm typeIn the fieldRequest a quote: Wireless siren
—RFID / fingerprint readerRestricts check-ins to authorized personnelOptionalRequest a quote: RFID / fingerprint reader
—Solar panel + battery kitFor guard posts without mains powerIn the fieldRequest a quote: Solar panel + battery kit
WR-001TargetPortable notification unitAlarm notifications to the response teamPlannedRequest a quote: WR-001
—TargetGSM/4G backup notificationSMS or calls from the control roomPlannedRequest a quote: GSM/4G backup notification

Specifications

Current system
Post deviceELC402: Attack, Fire, Check-in buttons
Check-in supervisionAdjustable interval (e.g. 30 min), 1 min tolerance; missed check-in alarm and log
NotificationCentral panel, wireless siren (audible + visual), dry-contact alarm output
IdentificationRFID card / fingerprint reader, optional
CommunicationClosed on-site RF network; no internet or GSM required
Post powerSolar panel + battery kit option
Radio (new series)
Frequency band433.05–434.79 MHz, 8 channels; 868 MHz as an optionTarget
Output power+22 dBm, adjustableTarget
Receiver sensitivity−129 dBm @ SF11 (chip datasheet)Target
ModulationLoRa SF9–SF11Target
AntennaSMA at the control room; PCB antenna or SMA on post devicesTarget
Range
Open field≥ 2000 m (SF11, 2 m height)Target
Indoor / within the compound≥ 500 m; extendable with repeatersTarget
Communication & security
EncryptionAES-128-CCMTarget
Addressing16-bit network ID + 16-bit addressTarget
PairingIn the field, from the control roomTarget
Systems on the same site≥ 8 networksTarget
Performance & fail-safe
Alarm latency≤ 1 sTarget
Check-in interval1–240 min; tolerance 1–10 minTarget
Missing-post detection3 report intervalsTarget
WatchdogIndependent hardware watchdog (IWDG)Target
Inputs / outputs
Post device (new series)3 buttons + RFID / fingerprint + tamper inputTarget
Power
Siren supply12–24 VDC + battery backupTarget
Mechanical & environmental
Control unitPanel-mount or desktopTarget
Post device housingIP65 outdoor, UV-resistantTarget
Operating temperature−25…+60 °C (post device)Target
HumidityUp to 95 %, non-condensingTarget
Warranty & service
Warranty2 years; manufacturing and service in Ankara
WIA-VPCON

Wireless Irrigation Control System

From farm to park — remote, scheduled, smart irrigation.

The problem in the field. On large farmland, parks, gardens and golf courses, valves are hundreds of meters to kilometers away from the control point. A wired valve network means trenching, cable theft and rodent damage; decoder systems are expensive and tied to a single brand. Manual irrigation schedules are inconsistent, water and energy waste is high, and pumps fail from dry running and phase faults.

The solution. The Elmes irrigation system manages solar-powered wireless valve/pump nodes from a central unit. Daily, weekly, monthly and yearly programs are defined in the scheduler software; the central unit sends commands to the nodes over RF, and each node opens its valve and confirms its status. A pressure node monitors line pressure; the pump node protects the pump with dry-run and phase protection. Water consumption is logged and analyzed.

Expansion. Soil moisture, temperature/humidity and weather data feed into irrigation decisions; frost warnings and triggering of frost-protection equipment are planned. Target vertical: hybrid AI greenhouse automation — optimizing climate, irrigation and fertigation decisions through sensor fusion and a learning model (together with Telemetry & Process Intelligence).

Features

  • Scheduled irrigation: daily/weekly/monthly/yearly calendar, valve groups, duration- or volume-based programs.
  • Water usage logging and analysis: water consumption is recorded and analyzed.
  • Pump protection: dry-run, phase and pressure protection; shared with the Wireless Well-Tank Control System.
  • Pressure monitoring: pump/valve coordination based on line pressure via the pressure node.
  • Solar-powered nodes: solar panel + battery where there is no mains power.
  • Repeater: range extension on long runs.
  • Sensor integration: soil moisture, temperature/humidity and weather data feed into irrigation decisions.
  • Well-tank integration: pump operation based on tank level, coordinated with the irrigation program.
  • Handheld module: manual valve opening in the field.
  • TargetFlow-based volume metering: volume logging and reports through a flow-meter input.
  • TargetNew-series sensor nodes: soil moisture and climate measurement with Smart Motion & Environmental Sensors.
  • TargetFrost warning: alerts on frost risk and triggering of frost-protection equipment.
  • TargetNew handheld remote: a field remote based on the Wireless Call Button Platform.
  • TargetMobile app and cloud: monitoring and control through Telemetry & Process Intelligence.
  • TargetAI irrigation optimization: schedule recommendations from moisture, weather and crop models.
  • TargetAI greenhouse automation: a hybrid greenhouse vertical that optimizes climate, irrigation and fertigation decisions together.

Specifications

Current system
System componentsCentral unit and scheduler software, valve node, pump node, pressure node, repeater
SchedulingDaily / weekly / monthly / yearly calendar; valve groups
Number of valves1–256 per system
Node powerSolar panel + battery
Pump protectionDry-run, phase and pressure protection
Radio (new series)
Frequency band433.05–434.79 MHz, 8 channels; 868 MHz as an optionTarget
Output power+22 dBm; within ETSI limitsTarget
Receiver sensitivity−129 dBm @ SF11Target
ModulationLoRa SF9–SF12Target
AntennaSMA; directional antenna on long runsTarget
Range
Open field≥ 2000 m (SF11, 2 m height); extendable with repeatersTarget
Vegetation / inside greenhouses≥ 500 mTarget
Communication & security
EncryptionAES-128-CCMTarget
Addressing16-bit network ID + 16-bit addressTarget
Systems on the same site≥ 8 networksTarget
Performance & fail-safe
Command-to-valve latency≤ 2 sTarget
Fail-safe on link lossValve-close timeout, adjustableTarget
Status report interval1–15 minTarget
Power
Node supply9–36 VDC; 20–50 W solar panel + 12 V battery (depending on node load)Target
Node consumption< 10 mA in sleep + relay / solenoid loadTarget
Solenoid drive24 VAC relay or 12 VDC latching driverTarget
Inputs / outputs
Valve outputs8 relays (EC-DIO8) or 16 (EC-DIO16) per boardTarget
Pump inputs / outputsEC-DIO8 digital inputs / outputsTarget
Analog inputsEC-AIO: 4 × 4–20 mA / 0–10 VTarget
Pulse inputEC-PLS, flow meterTarget
Central unit communicationEthernet / USB / 4G via the gateway; ModbusTarget
Mechanical & environmental
EnclosureIP65 polycarbonate field enclosure + DIN housingTarget
MountingPole or wall; solar panel bracket
Operating temperature−25…+70 °CTarget
HumidityUp to 95 % inside the enclosure, non-condensingTarget
Warranty & service
Warranty2 years; manufacturing and service in Ankara
MODM0-ELD100

Wireless Well-Tank Control System

No cable needed between pump and tank.

The problem in the field. There are often hundreds of meters to kilometers between a well/pump and the water tank. Carrying level information by cable means trenching, cable theft and lightning damage. In manual operation, the tank overflows (wasting water and energy) or runs dry (supply interruption); the pump runs dry and burns out, and phase faults damage the motor.

The solution. The tank unit reads the level from a float switch or an analog level sensor and sends it wirelessly to the well unit. The well unit starts the pump at the low level and stops it at the high level, protecting it through dry-run and phase-protection inputs. If communication is lost, the pump stops after a defined time. Status is visible on site via LCD/LED, and several tanks and wells are managed in the same system. Tanks without mains power use a solar panel kit. The first generation (N1) and the ELD100-based second generation (N2) are in the field; the new KD001 board is coming soon.

Expansion. The roadmap covers level/flow telemetry with an analog level sensor (4–20 mA) and a flow meter (shared with the Wireless Analog & Digital Data Link), SCADA and mobile monitoring through the Wireless Gateway / RTU and Telemetry & Process Intelligence, and a water-network loss and leak package. For general-purpose contact transfer, the same platform is offered as the Wireless Digital I/O Link.

Features

  • Dry-run protection: when dry running is detected via an electrode or current input, the pump stops and an alarm is raised.
  • Phase protection: start inhibit via a phase-sequence / phase-loss relay input.
  • Float filter: prevents false triggering caused by fluctuating levels (ELD100).
  • Multiple tanks / wells: several tanks and wells in the same system.
  • Repeater: range extension with a relay station on long or obstructed paths.
  • Solar-powered tank unit: for tanks without mains power.
  • Safe stop on link loss: the pump stops within a defined time.
  • Local display: LCD (N1) / LED (N2).
  • Handheld module: manual pump control.
  • General-purpose derivatives: on/off and pump control derivatives are covered by the Wireless Digital I/O Link.
  • TargetAutomatic retry: adjustable retry time after a dry-run stop.
  • TargetPriority and sequencing logic: pump priority and sequenced operation across multiple wells/tanks.
  • TargetLevel + flow telemetry: analog level (4–20 mA) and flow meter; a telemetry node shared with the Wireless Analog & Digital Data Link.
  • TargetEnhanced local display: level, link and alarm indication.
  • TargetSCADA / mobile monitoring: through the Wireless Gateway / RTU and Telemetry & Process Intelligence; Modbus RTU/TCP.
  • TargetNew-series hardware: the KD001 board, an EM-module-based repeater and a handheld remote based on the Wireless Call Button Platform.

Generations

Generations
Model codeGenerationHighlightsStatusRequest a quote
—N1 (first generation)LCD display; repeater (relay station)In the fieldRequest a quote: N1 (first generation)
MODM0-ELD100N2 (ELD100)LoRa; LED display; float filterIn the fieldRequest a quote: MODM0-ELD100
KD001-P1TargetNew board (KD001)Next-generation well-tank boardComing soonRequest a quote: KD001-P1

Specifications

Current system
Generations in the fieldN1 and N2 (ELD100)
New boardKD001Target
Pump logicStart at low level, stop at high level
Level sensingFloat switch or analog level sensor
Protection inputsDry run (electrode / current), phase sequence / phase loss
On link lossThe pump stops after a defined time
Local displayLCD (N1) / LED (N2)
Tank unit powerSolar panel kit option
Radio (new series)
Frequency band433.05–434.79 MHz, 8 channels; 868 MHz as an optionTarget
Output power+22 dBmTarget
Receiver sensitivity−129 dBm @ SF11 (chip datasheet)Target
ModulationLoRa SF9–SF12Target
AntennaSMA (EC carrier board)Target
Range
Open field≥ 2000 m (SF11, 2 m height)Target
Obstructed terrain≥ 500 m; with repeatersTarget
Communication & security
EncryptionAES-128-CCMTarget
Addressing16-bit network ID + 16-bit addressTarget
Systems on the same site≥ 8 networksTarget
Performance & fail-safe
Level-to-pump latency≤ 2 sTarget
Pump stop on link loss1–30 min, adjustableTarget
Float filter1–60 s, adjustableTarget
WatchdogIndependent hardware watchdog (IWDG)Target
Power
Supply9–36 VDC; 230 VAC adapter; 10–20 W solar panel + batteryTarget
Consumption< 1 W in standbyTarget
Inputs / outputs
Digital inputs8 × 12–24 V (EC-DIO8)Target
Relay outputs8 × 5 A / 250 VAC (EC-DIO8)Target
Analog inputsEC-AIO: 4 × 16-bitTarget
Pulse input (flow)EC-PLSTarget
CommunicationRS485 / Modbus (EC-485); gateway connectionTarget
Mechanical & environmental
EnclosureDIN housing + IP65 field enclosureTarget
Display (new series)LED status indicators; LCD optionTarget
Operating temperature−25…+70 °CTarget
HumidityUp to 95 %, non-condensingTarget
Warranty & service
Warranty2 years; manufacturing and service in Ankara
RT152-M16 / SLI16 / SLR16

Wireless Analog & Digital Data Link

Carry 4–20 mA / 0–10 V signals wirelessly.

The problem in the field. Between a field sensor (level, pressure, flow, temperature) and the control room there may be a road, a river, a railway, another company's property or simply several hundred meters. Running cable means trenching, permits and theft; the longer a 4–20 mA line gets, the more noise and grounding problems it picks up. Collecting multi-point contact signals (motor status, doors, level switches) one cable at a time is expensive.

The solution. The data link digitizes the digital inputs and analog signals at one end and carries them over 433 MHz to the other end, where relay and analog outputs hand them to the PLC "as if hard-wired". The M16 master unit of the RT152 family collects 16 inputs, talks to the PLC over RS485 / Modbus RTU and is monitored through a web interface; SLI16 input and SLR16 relay expansion units increase the channel count. If the link drops, the outputs go to a defined safe state and a fault contact is signaled.

Expansion. The new series targets a battery-powered telemetry node (powering a level/flow/pressure sensor from a battery or solar panel and reporting periodically) and a pulse (meter) input (wireless reading of water/electricity meters through their S0 pulse output, sharing its platform with the Wireless Meter Reading Node). Modbus TCP via the Wireless Gateway / RTU, cloud monitoring via Telemetry & Process Intelligence and use as a building block of the IIoT Retrofit Kit are planned.

Features

  • Transparent I/O: an input contact appears as a relay at the far end; to the PLC it behaves like a cable.
  • One-to-one analog transfer: 0/4–20 mA, 0–10 V, potentiometer, joystick (analog/digital); the same platform as the analog speed transfer in crane and machine remotes.
  • Master + expansion architecture: M16 master with SLI16 input and SLR16 relay expansion units.
  • RS485 / Modbus RTU: channel states and analog values are passed to the PLC as registers.
  • Web interface (M16): channel status, RSSI and configuration from a browser.
  • Link monitoring: heartbeat packets, link-fault relay and LED, defined safe state.
  • Optional modules: directional antenna and IP65 field enclosure.
  • TargetAdjustable safe state: the timeout and output state on link loss are user-configurable.
  • TargetModbus TCP and cloud: Modbus TCP through the Wireless Gateway / RTU, cloud monitoring through Telemetry & Process Intelligence.
  • TargetTelemetry node: battery or solar powered; periodic reports from a level, flow or pressure sensor with battery and RSSI data; shared with the well and reservoir system.
  • TargetPulse (meter) input: S0 water/electricity meter reading and production counting; the same EC-PLS board as the meter reading node.
  • TargetRepeater: range extension with the same hardware.
  • TargetIIoT Retrofit Kit building block: connecting legacy machine fleets without tearing anything out.

RT152 family

RT152 family
Model codeUnitContentsStatusRequest a quote
M16Master unit16 inputs; RS485 / Modbus RTU; web interface (channel status, RSSI, configuration)In the fieldRequest a quote: M16
SLI16Input expansionAdditional input channels for the masterIn the fieldRequest a quote: SLI16
SLR16Relay expansion16 relay outputsIn the fieldRequest a quote: SLR16
—TargetTelemetry nodeBattery or solar powered; level, flow or pressure sensor; periodic reports with battery and RSSI dataPlannedRequest a quote: Telemetry node
—TargetPulse-input version4× S0/reed meter inputs; shared with the meter reading nodePlannedRequest a quote: Pulse-input version

Specifications

Current system (RT152)
FamilyM16 master + SLI16 input and SLR16 relay expansion units
Frequency433 MHz
Digital channels16 digital inputs + 16 relays; more with expansion units
Analog channels8 analog outputs; 4–22 mA analog input
Analog signal types0/4–20 mA, 0–10 V, potentiometer, joystick
PLC interfaceRelay contacts, analog outputs, RS485 / Modbus RTU
Web interfaceChannel status, RSSI and configuration (M16)
On link lossOutputs go to a defined safe state; link-fault contact and LED
Radio (new series)
Frequency band433.05–434.79 MHz, 8 channels; 868 MHz as an optionTarget
Output power+22 dBmTarget
Receiver sensitivity−129 dBm @ SF11Target
ModulationLoRa SF7–SF10 (low SF for faster analog updates)Target
Data rate~5.5 kbps at SF7Target
Antenna connectorSMA (EC carrier board)Target
Range
Open field≥ 2000 m (SF9, 2 m height)Target
Industrial environment≥ 300 mTarget
Communication & security
EncryptionAES-128-CCMTarget
Addressing16-bit network ID (NetID) + 16-bit addressTarget
Systems on the same site≥ 8 independent networksTarget
Performance & fail-safe
Digital input → relay≤ 100 ms (SF7)Target
Analog update rate100 ms–10 s, adjustableTarget
Fail-safe on link loss1–60 s, adjustableTarget
WatchdogIndependent hardware watchdog (IWDG)Target
Power
Supply9–36 VDC; 230 VAC adapterTarget
ConsumptionDepends on the number of relays
Standby consumption< 2 WTarget
Battery nodeBased on EM-G0L-433-LP; sleep < 10 µA; ≥ 3 years at 15-minute reportingTarget
Inputs / outputs (new series)
Digital inputs16 opto-isolated inputs, 12–24 V (EC-DIO16)Target
Relay outputs16 relays 5 A / 250 VAC or transistor outputs (EC-DIO16)Target
Analog inputs4× 4–20 mA / 0–10 V, 16-bit (EC-AIO)Target
Analog outputs2× 4–20 mA / 0–10 V, 12-bit DAC (EC-AIO)Target
Pulse inputs4× S0/reed, ≤ 10 kHz (EC-PLS)Target
Interfaces (new series)
Serial communicationIsolated RS485, Modbus RTU (EC-485); Modbus TCP through the Wireless Gateway / RTUTarget
Wi-Fi / webConfiguration over web and BLE via ESP32 (EM-G0LW)Target
Mechanical & environmental
EnclosureDIN-rail housing, 6–9 modulesTarget
Mounting35 mm DIN railTarget
Operating temperature−25…+70 °CTarget
HumidityUp to 95 %, non-condensingTarget
Warranty & service
Warranty2 years; manufacturing and service in Ankara
Hardware

Wireless Waiter Call — Long Range

From hotel interiors to the beach — simple, fast calls.

The problem in the field. At hotels and resorts, guests are on the beach, by the pool, in the garden or on the terrace, and the waiter is out of sight. Short-range call systems do not reach the beach; Wi-Fi based solutions struggle with coverage and battery life; raising a hand or shouting lowers the quality of service. Management has no idea how many seconds it takes to answer a call.

The solution. Every table, sun lounger or room gets a battery-powered call button; when a guest presses it, the call appears on the central display and on the pager of the waiter responsible for that area. The current-generation system works with a range of 100–200 m and shows the table/room number and call priority. The new generation aims to cover the indoor areas and the beach with a single gateway or one repeater thanks to long-range LoRa, to broadcast the waiter's acknowledgment to the other pagers and the display as "received", and to log call times for shift reports.

Application profiles. Single-button (call), three-button (call / bill / cancel) and six-button (menu-specific) versions; in the new generation, an IP65, UV-resistant sun-lounger button and a wall-mounted room/VIP button. The same button platform is also used for taxi calls, guard alarms and forklift/operator calls: Wireless Call Button Platform.

Features

  • 1 / 3 / 6-function buttons: call, bill, cancel and special requests.
  • Table / lounger / room mapping: button name, area and responsible waiter; call priority.
  • Central display and pager: the call shows up with its table/room number on the central display and on the waiter's pager.
  • TargetLong-range single network: indoor areas and beach/garden on one network; extension with a repeater.
  • TargetSent / received feedback: LED and buzzer on the guest's button.
  • TargetPager acknowledgment (ACK) broadcast: the waiter acknowledges; the other pagers and the display show "received".
  • TargetEscalation: an unacknowledged call is passed to the supervisor or a second pager.
  • TargetHistory and reports: call-to-acknowledgment time, shift/area reports, peak hours.
  • TargetMobile notifications: push notifications via a local server or Telemetry & Process Intelligence.
  • TargetStandalone mode: straight from button to pager without a gateway.
  • TargetBattery management: low-battery list, easy battery replacement, battery life measured in years.
  • TargetOutdoor housing: IP65, UV-resistant, sand- and water-proof.
  • TargetShared platform: the same button serves taxi calls, guard alarms and forklift/operator calls.

Specifications

Current system
Button options1 / 3 / 6 functions (call, bill, cancel, special requests)
Central unitCentral display; table/room number and call priority
Waiter pager (handset)No limit on the number of pagers
Range
Current generation100–200 m
Open field (new generation)≥ 1000 m (SF11, gateway at 3 m height)Target
Indoors (new generation)≥ 150 m (across floors)Target
Radio (new generation)
Frequency band433.05–434.79 MHz, 8 channels; 868 MHz as an optionTarget
Output power+14…+22 dBm (adjustable for battery life)Target
Receiver sensitivity−129 dBm @ SF11 (chip datasheet)Target
ModulationLoRa SF9–SF11Target
AntennaButton and pager: internal PCB antenna; gateway: SMATarget
Communication & security
EncryptionAES-128-CCMTarget
Addressing16-bit network ID (NetID) + 16-bit addressTarget
Systems in the same facility≥ 8 independent networksTarget
Performance
Button → pager / display≤ 2 sTarget
Acknowledgment broadcast≤ 2 sTarget
Low-battery warningYes; listed at the central unitTarget
Power
Button batteryCR123A or 2×AA; sleep < 10 µA; ≥ 2 years at 20 calls/dayTarget
Gateway / central unit supply9–36 VDC / USBTarget
System components (new generation)
Call button1 / 3 / 6 buttons; LED confirmation, buzzerTarget
PagerPocket type with clipTarget
Central unit7-inch HMI or PC / tablet; Ethernet / USB; mobile push notificationsTarget
Mechanical & environmental
Button housingTable: ~70 × 70 mm; sun lounger: IP65, UV-resistant; room: wall-mountedTarget
Operating temperature−10…+60 °C button (outdoor), 0…+50 °C pagerTarget
Humidity / waterIP65 beach buttonTarget
Warranty & service
Warranty2 years; manufacturing and service in Ankara
TCSComing soon

Wireless Taxi Call System

Press the button, the taxi is at the door — stand calls without phones or apps.

The problem. Taxi stands take calls from their subscribers (elderly and disabled people, residents of housing estates, shopkeepers) by phone: the line is busy, the number is forgotten, and not every customer has a smartphone or app. Existing wireless button systems work with simple light/sound receivers: you cannot see which subscriber pressed, in what order or how many times; there is no "received" signal from the driver's remote; the devices are old and spare parts are gone.

The solution. When pressed, the battery-powered button in the subscriber's home sends its ID and button number to the stand over RF. The stand receiver shows the subscriber's name/address, the time and the queue on a DWIN touchscreen, and a buzzer sounds. The next driver takes the call from the screen or from their own remote, and the call drops off the list. A web interface (ESP) manages the subscriber list and logs from a browser. With the two-way LoRa profile, an LED on the subscriber's button is intended to confirm the pickup.

Gradual migration. The new stand receiver uses the same RF settings as the subscriber buttons already installed in the field, so stands can switch over without replacing their buttons. In new installations, the LoRa button of the Wireless Call Button Platform provides long range and long battery life.

Features

  • Compatible with installed buttons: the same RF settings as the subscriber buttons already in the field; gradual migration to LoRa.
  • Touchscreen call list: subscriber name/address, time and queue; "take / close / cancel" with a single tap; selectable alert tone.
  • Driver remote: take the next call without walking to the screen; every remote has its own ID, so the log shows which vehicle took the call.
  • Web interface (ESP): subscriber registration, log export, Wi-Fi setup; no PC software needed.
  • Repeat-press merging: repeated presses by the same subscriber count as a single call.
  • TargetTwo-way LoRa: call confirmation by LED on the subscriber's button.
  • TargetButton battery report: low-battery warning on the stand display.
  • TargetReal-time clock and persistent log: call history kept with an RTC in Flash memory.
  • TargetRepeater and neighbor-stand separation: range extension; stands fully separated by network ID (NetID).
  • Target3-button subscriber version: taxi / cancel / emergency.
  • TargetDriver pager: the WR-001 remote shows the call in the driver's pocket.
  • TargetCloud log: call history kept on Telemetry & Process Intelligence.

System components

System components
Model codeComponentHardwareStatusRequest information
TCS-BTNSubscriber call buttonSTM32F030 + CC1101; LoRa version planned on the battery profile of the Call Button PlatformPrototypeRequest information: TCS-BTN
TCS-RX-DWINStand receiver + 7 / 10-inch DWIN touchscreen + buzzerPIC16F887 / ESP + CC1101; EM-G0LW-433 + DWIN T5L version plannedPrototype (UI 800×480 / 1024×600)Request information: TCS-RX-DWIN
TCS-RX-WEBStand receiver without display, Wi-Fi web interfaceESP + CC1101; EM-G0LW-433 version plannedPrototypeRequest information: TCS-RX-WEB
TCS-RMTDriver remote (take / close call)First prototype; move to the 1-button profile of the Call Button Platform plannedPrototypeRequest information: TCS-RMT

Specifications

Radio
Frequency (compatible profile)~434.65 MHz
Frequency (LoRa)433.05–434.79 MHz, 8 channelsTarget
Channels (compatible profile)Single fixed channel (compatibility with installed buttons)
Channels (LoRa)8Target
Output power (compatible profile)≤ +10 dBm (CC1101)
Output power (LoRa)+22 dBm (SX1268)Target
Receiver sensitivity (compatible profile)~−104 dBm @ 2.4 kbps (chip datasheet)
Receiver sensitivity (LoRa)−129 dBm @ SF11Target
Modulation / rate (compatible profile)2-FSK, ~2.4 kbps, ~5 kHz deviation, 15-byte fixed packet
Modulation (LoRa)LoRa SF7–SF10Target
AntennaButton: internal PCB / helical antenna; receiver: external SMA, omni antenna
Range
Urban (compatible profile)Neighborhood scale (field experience; not measured)
Open field (LoRa)≥ 2000 m (SF9, stand outdoor antenna at 3 m height)Target
Urban (LoRa)≥ 500 mTarget
Communication & security
Coding (compatible profile)ID + CRC; no encryption
Encryption (LoRa)AES-128, NetID + 16-bit address, replay counterTarget
Neighboring stands (compatible profile)Single channel; stands are separated by ID list
Neighboring stands (LoRa)≥ 8 neighboring stands via channel × NetIDTarget
Performance & fail-safe
Call latency< 1 s (button → screen)
On communication lossThe call stays on the list
Button retryThe button resends the call if no acknowledgment arrivesTarget
Power
Stand receiver12 VDC adapter (7-inch display ~0.5 A; 10.1-inch ~1 A)
Stand receiver (new version)12–24 VDC; optional battery backupTarget
Subscriber button batteryCR123A or 2×AA; ≥ 2 years at ~10 calls/dayTarget
Driver remote batteryCR2032 / CR123ATarget
Interfaces
DisplayDWIN T5L DGUS II; 7-inch 800×480 or 10.1-inch 1024×600; UART 115.2 kbps
Receiver outputsBuzzer; Wi-Fi web interface (ESP)
Beacon relay1× relayTarget
ServiceSWD / UART; settings via the web interface
Mechanical & environmental
Receiver housingDesktop / wall-mount display housing (7 / 10-inch bezel); IP20, indoor
Button housingWall-mounted; IP54 (outside door)Target
Operating temperature (receiver)0…+50 °C (indoor)
Operating temperature (button)−20…+60 °CTarget
Warranty & service
Warranty2 years; service in AnkaraTarget
HardwareComing soon

Wireless Call Button Platform

One button hardware for every call scenario.

The problem. Call and alarm buttons all do the same job: someone presses, someone somewhere is notified. Yet each application is sold as a separate product — waiter button, panic button, taxi button, fire button — and most are short-range (100–200 m), one-way, unencrypted 433 MHz "remote" circuits with unknown battery life. They do not reach from the beach to the kitchen, from the neighborhood to the taxi stand, or from the factory yard to the guard hut; nobody knows whether a press was received; and two systems on the same site trigger each other.

The solution. The platform puts a battery-powered LoRa node (EM-G0L-433-LP) into a button housing. Each press sends an encrypted packet with the button ID, button number, battery status and a counter; when the central unit or receiver returns an acknowledgment (ACK), the LED on the button turns green (two-way operation is targeted). The firmware profile defines what a press means: waiter / bill / cancel, attack / fire / patrol, taxi call / cancel, break-glass alarm + tamper.

Wake-on-press design. The MCU and radio sleep until the button is pressed; periodic "I'm alive" packets let the central unit track battery and link status. Housing and labeling change with the application; the electronics stay the same.

Features

  • Profile selection: waiter, taxi, guard, fire, forklift, panic and door profiles on the same hardware; set at the factory or with a service tool.
  • "I'm alive" report: battery, temperature and RSSI feed a maintenance list at the central unit.
  • Long / double press: extra meanings on a single key (emergency, cancel).
  • External contact input: button transmitter for doors, barriers or machines; single-contact monitoring. For 8-input battery-powered monitoring, see the Wireless Digital I/O Link.
  • Optional modules: buzzer, vibration, RFID (guard profile), IP65 housing, u.FL external antenna.
  • TargetACK LED: the user sees on the button that the call was received (two-way LoRa).
  • TargetReplay protection and AES: the button cannot be cloned.
  • TargetTamper contact and supervision: in the fire and guard profiles.
  • Target868 MHz version: for export markets.

Variants

Variants
Model codeButtonsHousingBatteryProfilesRequest information
CB1-W1Wall / table, IP54CR123A or 2×AAWaiter, taxi, panic, forkliftRequest information: CB1-W
CB1-K1Key fob / lanyardCR2032 / CR123APanic, lone workerRequest information: CB1-K
CB3-W3Wall, IP54CR123A / 2×AAGuard (attack / fire / patrol); taxi (call / cancel / emergency); waiter (waiter / bill / cancel)Request information: CB3-W
CB6-T6Tabletop2×AAWaiter / hotel (6 service types)Request information: CB6-T
CBF-GB1 (break-glass / manual call point)Red fire call point housing, IP54 / IP65Li-SOCl2 AAFireRequest information: CBF-GB
CB1-W-P1 + external inputWallBatteryDoor / barrier button transmitter, machine callRequest information: CB1-W-P

Specifications

Radio
Frequency band433.05–434.79 MHz, 8 channels (SX1268)
868 MHz versionAs an optionTarget
Output power+22 dBm max.; profile default +14…+20 dBm (for battery life)
Receiver sensitivity−129 dBm @ SF11 (chip datasheet)
Modulation / packetLoRa SF7–SF12; short packet (≤ 16 bytes)
AntennaInternal (PCB trace / helical); u.FL option in the IP65 outdoor housing
Range
Open field≥ 1500 m (SF9, internal antenna, button at 1.2 m wall height, central outdoor omni antenna at 3 m)Target
Indoors≥ 150 m / 3 floors (hotel)Target
Communication & security
Encryption / codingAES-128-CCM + counter (replay protection), NetID + 16-bit addressTarget
Coding in previous-generation buttonsID + CRC
PairingLearn mode on the receiver (press the button → add to list) or via a service tool; UID-basedTarget
Systems on the same site≥ 8 systems via 8 channels × NetIDTarget
Performance & fail-safe
Press → central unit< 300 ms @ SF7–SF9Target
ACK → LED< 1 sTarget
Retries3 attempts, random 50–300 ms back-off
Power
BatteryCR123A (3 V, ~1500 mAh) or 2×AATarget
Break-glass and key-fob batteryBreak-glass: Li-SOCl2 AA; key fob: CR2032
ConsumptionPress event ~120 mA × ~100 ms; 2 "I'm alive" packets a day
Sleep current< 10 µATarget
Battery life≥ 2 years at 20 presses/day (CR123A); ≥ 5 years in the fire profile (rare presses); estimated with the SDK calculatorTarget
Low-battery threshold2.7 V (CR123A); reported to the central unit
Inputs / outputs
Keys1 / 3 / 6 mechanical keys; break-glass: glass/plastic plate + micro switch; long press 1.5 s, double press
Indicators1× RGB LED (sent / ACK / error / battery); buzzer (optional, per profile)
External input1× dry contact (CB1-W-P: door / barrier / machine)
Tamper contact1× tamper inputTarget
ServiceSWD pads; UART (programming fixture)
Mechanical & environmental
Housing dimensionsWall 1/3 keys ~80 × 80 × 25 mm; table 6 keys ~120 × 80 × 30 mmTarget
Other housingsKey fob; standard red fire call point housing for break-glass
Ingress protectionIP54 (indoor / semi-outdoor); IP65 (outdoor, outdoor break-glass)Target
MountingScrews / double-sided tape / lanyard
Operating temperature−20…+60 °C (depends on battery chemistry; −40…+85 °C with Li-SOCl2)Target
Warranty & service
Warranty2 years; battery is a consumableTarget
HardwareComing soon

Wireless Meter Reading Node

Wireless pulse collection from water and electricity meters — years on a battery.

The problem. Water utilities and organized industrial zones read hundreds of meters by hand: late bills, reading errors, trouble getting into meter pits and basements. Non-revenue water (NRW) analysis requires district inlet meters and subscriber totals to be read over the same time window, which monthly manual reading cannot deliver. In factories, energy, water and compressed-air consumption cannot be tracked per line; the meters have S0 outputs, but no cable was ever run. Off-the-shelf LoRaWAN meter modules require an operator subscription and a closed platform, and nothing can be done in the field apart from changing the battery.

The solution. The node connects to the meter's S0/reed pulse output; it counts pulses (debounced, 4 independent inputs), keeps the totals in non-volatile memory and, at a configured interval (e.g. 15 min / 1 hour), sends the total, interval flow, battery and RSSI over LoRa to the gateway (Wireless Gateway / RTU). The gateway passes the data to SCADA or to the Telemetry & Process Intelligence platform as Modbus, MQTT or CSV.

Versions. The battery version is designed to run in a meter pit for years; the mains-powered version sits on a DIN rail with a threshold relay (e.g. a leak alarm when the night-flow threshold is exceeded). To prevent data loss, the node is intended to keep its latest reports and the gateway to re-request missing intervals. Where continuous analog or contact signals must be carried, the Wireless Analog & Digital Data Link is used; the two products share the same pulse-input platform.

Features

  • 4 independent counters, persistent totals: values survive power cuts and battery changes.
  • Interval flow + total: synchronized district readings for NRW analysis (gateway time sync).
  • Event reports: threshold violations and low battery are reported immediately.
  • Battery life management: reporting interval and power profile are set in the field; reports thin out automatically on low battery.
  • Relays on the mains version: local threshold alarm or valve shut-off when a leak is detected.
  • Gateway integration: Modbus TCP register map, MQTT JSON, CSV.
  • Optional: 868 MHz version, analog input (pressure), repeater.
  • TargetGap recovery: buffering on the node, re-requests from the gateway.
  • TargetReverse-flow and tamper detection: via a second reed input and a lid contact.
  • TargetCloud monitoring: through Telemetry & Process Intelligence.
  • TargetLoRaWAN compatibility mode: under evaluation.

Variants

Variants
Model codeSupplyInputsOutputsHousingUseRequest information
PLS4-BBattery (Li-SOCl2 2× C or D; 3.6 V)4× S0/reed—IP67 box, meter pitWater utility, remote meterRequest information: PLS4-B
PLS4-D9–36 VDC (DIN rail)4× S0/reed, 10 kHz2× relay (threshold / alarm)DIN, 2 modulesIndustrial zone, factory, energy analyzer S0Request information: PLS4-D
PLS4-B-868Battery4× S0/reed—IP67868 MHz version, exportRequest information: PLS4-B-868
PLS4-D-GW9–36 VDC4× S0/reed2× relay + Wi-Fi / EthernetDIN, 6 modulesSingle box with gateway (small sites)Request information: PLS4-D-GW

Specifications

Radio
Frequency band433.05–434.79 MHz, 8 channels (SX1268); 868 MHz version (SX1262)
Output power+22 dBm max.; +14…+20 dBm in the battery profile
Receiver sensitivity−129 dBm @ SF11 (chip datasheet)
Modulation / packetLoRa SF7–SF12; report packet ≤ 32 bytes
Antenna connectoru.FL → box-mounted SMA (battery IP67) / board-mounted SMA (DIN)
Range
Open field≥ 3000 m (SF10, outdoor omni antenna 2 dBi, gateway at 6 m)Target
Meter pit → gateway≥ 500 m (with a pit-lid antenna)Target
Communication & security
EncryptionAES-128-CCM, NetID + 16-bit address, sequence numberTarget
PairingBy UID to the gateway list (service tool / gateway web interface)
Systems on the same site≥ 8 via channel × NetID
Performance & fail-safe
Reporting interval1 min–24 h, adjustable; event reports immediately
Offline detection3 reporting intervals (at the gateway)
WatchdogIndependent hardware watchdog (IWDG)
Power
Battery (PLS4-B)Li-SOCl2 3.6 V, 2× C (2× 8.5 Ah) or D; sleep < 10 µA; ~120 mA × 100 ms per report
Battery life≥ 5 years at hourly reports and ≤ 1 Hz pulses (estimated with the SDK calculator)Target
Mains powered (PLS4-D)9–36 VDC, reverse-polarity + TVS protection; ~40 mA @ 12 V standby, +70 mA per relay
Inputs / outputs
Pulse inputs4× S0 (IEC 62053-31 class A/B interface: 27 V / 27 mA limit) or reed / dry contact; selectable pull-up; 2–20 ms debounce; max. 10 kHz (DIN) / 100 Hz (battery)
Counters4× 32-bit persistent counters (FRAM / Flash); pulse/liter or pulse/kWh factor set at the gateway
Relay outputs2× relay 5 A (DIN version): threshold / alarm
Other inputsTamper / lid contact, reverse flow (2nd reed)Target
CommunicationService UART / SWD; gateway: Modbus TCP (register map), MQTT (JSON), CSV
Mechanical & environmental
HousingBattery: IP67 polycarbonate, 2 cable glands; DIN: 2-module (36 mm) rail housing
Battery housing size~120 × 80 × 55 mmTarget
MountingMeter-pit wall / next to the meter / DIN rail
Operating / storage−30…+60 °C (Li-SOCl2) / −40…+85 °C; 100 % humidity (IP67, condensation in the pit)
Warranty & service
Warranty2 years; battery is a consumableTarget
EL485L-S

Wireless RS485 Modem

Extend your RS485 line wirelessly — no trenching, no cable.

The problem. Most PLCs, RTUs, energy analyzers and meters speak RS485/Modbus RTU. When devices are spread across a site (wells, reservoirs, pump stations, transformers, silos), running an RS485 line means trenching, conduit and cable costs; road and stream crossings or third-party land can make the line impossible. Existing cable runs break due to lightning, moisture and digging accidents, and finding the fault takes hours. GSM modems bring subscriptions and dependence on network coverage.

The solution. The wireless RS485 modem is installed at both ends of the RS485 line and carries the serial data transparently over radio. The PLC/SCADA software does not change; the modem looks like a cable. The current EL485L-S links up to 10 km in open field (1200 bps, per the technical datasheet) with 500 mW output power; 40 channels let several links run side by side on the same site. With master/slave firmware, one central station can poll several remote ends (Modbus polling).

New series. The same function is to be delivered with an EM-G0L-433 or EM-G0L-868 module and the EC-485 carrier board (I/O Carrier Boards): LoRa modulation gives higher sensitivity and interference immunity at low data rates, the RS485 port becomes isolated, and an optional Wi-Fi/Ethernet Modbus TCP bridge (Wireless Gateway / RTU) is offered in the same housing.

Features

  • Transparent serial bridge: no drivers or configuration on the PLC/SCADA side; it behaves like an RS485 cable.
  • Master/slave firmware: central polling, RF timeout flag; point-to-point or star topology.
  • Adjustable power (10–500 mW) and 40 channels: neighboring links on separate channels; lower power at short distances to reduce interference.
  • Large packets (500 bytes): long Modbus responses (multi-register reads) in a single RF packet.
  • Optional modules: directional antenna kit, DIN-rail power supply, RS232 converter.
  • TargetIsolated RS485: 2.5 kV isolation and a termination switch.
  • Target"Link OK" relay output and RSSI/SNR indication: link quality via LEDs and the service port.
  • TargetModbus RTU address routing: one master, N remote ends; frames are forwarded to the right end by Modbus address.
  • TargetRepeater profile: range extension through an intermediate station.
  • TargetModbus TCP bridge: with the dual-radio LoRa/Wi-Fi module (EM-G0LW-433).
  • TargetOTA updates: remote firmware updates.

Generations and variants

Generations and variants
Model codeHardwareBandInterfaceStatusRequest a quote
EL485L-SSi4463868–869 MHz (433–434 MHz option listed in the datasheet)RS485, D-SUB-9 + KLS4 terminal blockIn the field (Mersin, Şanlıurfa)Request a quote: EL485L-S
EL485L-S-M / -SSi4463869 MHzMaster / slave firmwareIn the fieldRequest a quote: EL485L-S-M / -S
EM485-868TargetNew series: EM-G0L-868 + EC-485868 MHz (SX1262)Isolated RS485 + optional RS232PlannedRequest a quote: EM485-868
EM485-433TargetNew series: EM-G0L-433 + EC-485433 MHz (SX1268)Isolated RS485PlannedRequest a quote: EM485-433
EM485-433-GWTargetNew series: EM-G0LW-433 + EC-485433 MHz + Wi-FiRS485 + Modbus TCP bridgePlanned (shared with the gateway)Request a quote: EM485-433-GW

Specifications

Radio
Frequency band (EL485L-S)868–869 MHz ISM (the datasheet also lists a 433–434 MHz option)
Frequency band (new series)868 MHz (SX1262) or 433 MHz (SX1268) versionTarget
Channels (EL485L-S)40, selectable
Channels (new series)8 (433 MHz plan)Target
Output power (EL485L-S)500 mW (27 dBm); adjustable 10–500 mW
Output power (new series)+22 dBm; ETSI 14 dBm ERP limit at 868 MHzTarget
Receiver sensitivity (EL485L-S)−126 dBm
Receiver sensitivity (new series)−129 dBm @ SF11 (chip datasheet)Target
Modulation (EL485L-S)(G)FSK (Si4463)
Modulation (new series)LoRa SF7–SF12Target
RF data rate (EL485L-S)0.6–300 kbps
RF data rate (new series)0.3–62.5 kbps (LoRa)Target
Antenna connector (new series)SMA female, 50 ΩTarget
Range
Open field (EL485L-S)Up to 10,000 m @ 1200 bps (datasheet claim; line of sight)
Open field (new series)≥ 5 km @ SF10, 2 dBi antenna, 3 m heightTarget
Industrial / indoors (new series)≥ 300 mTarget
Communication & security
Coding (EL485L-S)CRC-16 (ITU), address / channel; no encryption
Encryption (new series)AES-128-CCM; NetID + 16-bit addressTarget
Links on the same site (EL485L-S)40 channels; each link on its own channel
Systems on the same site (new series)≥ 8 independent networks via channel × NetIDTarget
Performance & fail-safe
Latency (EL485L-S)Depends on baud rate and packetization
Latency (new series)< 100 ms @ SF7, short packetTarget
On communication loss (EL485L-S)Through the PLC's Modbus timeout; the PLC/RTU logic defines the safe state
"Link OK" output (new series)Relay output, 1–60 s adjustableTarget
Watchdog (EL485L-S)Microcontroller WDT (PIC)
Watchdog (new series)Independent hardware watchdog (IWDG)Target
Power
Supply (EL485L-S)12–24 VDC
Supply (new series)9–36 VDC; reverse-polarity + TVS protectionTarget
Consumption (new series)~118 mA @ 3.3 V while transmitting (module) + carrier boardTarget
Interfaces
Serial interface (EL485L-S)RS485 (D-SUB-9 + KLS4 terminal block); 1.2–115.2 kbps selectable; packet ≤ 500 bytes
Serial interface (new series)Isolated RS485, 115.2 kbps + optional RS232; 2× DI, 2× DO (EC-485)Target
Protocol (EL485L-S)Transparent serial; works with Modbus RTU
Protocol (new series)Transparent + Modbus RTU address routing (address → remote end) + Modbus TCP (GW version)Target
Mechanical & environmental
Housing (EL485L-S)83 × 137 × 34 mm, IP55
Housing (new series)DIN-rail housing, 2 modules (36 mm); IP20 (inside a panel)Target
Mounting (EL485L-S)Wall / panel (box)
Mounting (new series)35 mm DIN railTarget
Operating temperature (EL485L-S)−40…+85 °C
Operating temperature (new series)−25…+70 °C (terminal / relay limit)Target
Humidity (new series)5–95 %, non-condensingTarget
Warranty & service
Warranty / spare parts2-year manufacturer warranty; 15-year parts availability; made in Ankara
WR-001Coming soon

WR-001 LoRa Wireless Alarm / Call Pager

The alarm in your pocket — everyone sees who acknowledged it.

The problem. In factories, hotels, warehouses and plants, getting an alarm (fire, intrusion, machine stop, customer call) to the person in charge depends on a siren and a light on the panel. That person is not always at the panel; phone/GSM notifications depend on coverage and apps, and they arrive late. When several staff members are on duty, nobody knows who is handling it, so the alarm is either handled twice or not at all.

The solution. WR-001 carries the alarm broadcast by the central unit (a panel or the Wireless Gateway / RTU) to the staff member's pocket over LoRa within seconds. The OLED shows the alarm code and its source, and a buzzer sounds. When the user acknowledges with OK, the ACK goes both to the central unit and, as a broadcast, to the other pagers; the central unit repeats it as ACK_RELAY, so pagers that were out of range are cleared too. The device normally sits in STOP mode while the radio listens with RX duty-cycling, aiming for low consumption and long battery life. Frequency, SF, power and address are set from the menu; a TX/RX test mode checks range during installation.

Works with. Alarms are generated by Elmes central units: Wireless Fire Alarm System (Firesens), Wireless Guard Patrol System, Wireless Waiter Call — Long Range and Wireless Call Button Platform. WR-001 is the pocket notification end of these systems; the text of the 8 alarm codes is defined per customer.

Features

  • ACK broadcast and relay: a single acknowledgment clears every pager; the central unit sends ACK_RELAY to those out of range.
  • 8 alarm codes with custom text: the code-to-text table lives in firmware and is defined per customer (Fire / Intrusion / Patrol round / Table 12 / Line 3 stop…).
  • Low-power listening: SX1268 RX duty-cycling + CAD with the MCU in STOP mode; wake-up on a radio interrupt (DIO1) or a button press.
  • Menu and test mode: frequency/SF/BW/power/address settings; TX test (selected alarm code), RX test (RSSI/SNR), buzzer test, battery status and firmware version. No separate tool is needed to check range during installation.
  • Settings in Flash: stored as key-value pairs in the last sector and retained through power loss.
  • TargetVibration and silent mode: vibration motor, silent mode and shift hours.
  • TargetAlarm history and online list: the last 20 alarms on the pager; the central unit lists online pagers via PING.
  • TargetOTA updates: firmware and alarm texts updated in the field (built on the Module Programming/Test Fixture + SDK Package).
  • TargetSiren variant: a loud wireless siren/warning unit with a speaker driver.
  • TargetDirect button profile: notifications sent straight from a Wireless Call Button Platform button to the pager.
  • TargetNetID and AES-128: network ID and encryption with the move to the Elmes Module Series platform.

Variants

Variants
Model codeHardwareDisplay / alertBatteryStatusRequest information
WR-001 (R2)STM32F070 + SX1268, 433 MHz128×64 OLED, buzzer, 5 buttonsLi-ionPrototype (PCB R2)Request information: WR-001 (R2)
WR-001-RS1Same hardware as R2; RS1 PCB variantSame as R2Same as R2In designRequest information: WR-001-RS1
WR-001-STargetR2 + speaker / loud siren driverOLED + sirenLarger batteryPlannedRequest information: WR-001-S
WR-001-LPTargetBuilt on the EM-G0L-433-LP battery LoRa node module (module series)Same as R2CR123A / Li-ionPlannedRequest information: WR-001-LP

Specifications

Radio
Frequency band433.000–434.790 MHz in 10 kHz steps via the menu; SX1268
Channel settingContinuous frequency setting via the menu
System channel plan8 channels; aligned with the Elmes module series channel planTarget
Output power0…+22 dBm adjustable (default +22 dBm)
Receiver sensitivity−124 dBm @ SF7/BW125 … −137 dBm @ SF12 (SX1268 datasheet)
ModulationLoRa SF7–12, BW 125/250/500 kHz, CR 4/5
Data rate0.3–11 kbps (depending on SF/BW); packets ≤ 16 bytes
AntennaInternal (PCB trace or helical); RF switch for TX/RXTarget
Range
Open field≥ 1000 m (SF9, internal antenna, 1.5 m hand height)Target
Indoors≥ 150 m / 3 floors (SF9)Target
Communication & security
Packet framingSyncWord + address + CRC8 + sequence number; no encryption in today's version
EncryptionAES-128 (with the move to the module series)Target
Addressing / capacity254 pagers + central unit; broadcast address 0xFF; 8 alarm codes
PairingAddress assignment via the menu
Pager registryRegistered pager list on the central unitTarget
Separating systems on one siteSeparation by frequency/SF; network separation by SyncWord
Independent networks per site≥ 8Target
Performance & fail-safe
Alarm latency< 3 s (RX duty-cycle period 2–5 s + ~60 ms airtime @ SF7); < 200 ms with continuous RX in the emergency profileTarget
ACK propagation3 repeats with random back-off
ACK reaching all pagers< 5 sTarget
WatchdogIWDG (prescaler compatible with STOP mode)
Power
BatterySingle-cell Li-ion; battery gauge 4.2 V = 100 %, 3.0 V = 0 %
Battery capacity≥ 1000 mAh (depending on the housing)Target
Standby consumption< 50–100 µA average (MCU in STOP, SX1268 sleep 0.6 µA, RX duty-cycle average)Target
Alarm / TX current~15–30 mA in alarm mode (OLED + buzzer); 118 mA TX peak
Battery life≥ 7 days standby; ~400 days theoretical at 1000 mAh and 100 µA average, real life depends on alarm frequencyTarget
ChargingUSBTarget
Interfaces
DisplaySSD1306 128×64 OLED (I2C), 2 font sizes
Buttons5 buttons: Menu, Up, Down, OK, Back; 50 ms debounce, 1.5 s long press
Audible alertBuzzer (push-pull drive, 2–4 kHz, 3 patterns: alarm / acknowledge / error)
Vibration alertVibration motorTarget
Service interfaceSWD
UART serviceSettings and OTA over UARTTarget
Mechanical & environmental
HousingHandheld housing; 3D design ready
CarryingBelt clipTarget
Ingress protectionIP54 (splash-proof)Target
Operating temperature−10…+50 °C (Li-ion limit)
Storage temperature−20…+60 °CTarget
Warranty & service
Warranty2 years; the battery is a consumableTarget
ServiceAnkara

02 · Products

Security & Sensors

Wireless door control, access authorization and battery-powered environmental sensor nodes.

RX-KD

Smart Door Control & Access

RFID + remote + web-based authorization.

The problem. Doors in factories and campuses are scattered: outer barriers, warehouse doors, cold rooms, passages between production areas. With wired access control panels, every door needs reader, lock, contact and exit-button cabling; distance and inter-zone runs drive up the cost. Existing plants often have no cable route at all. Remote-type RF door openers, on the other hand, do not record who opened the door, can be copied and do not talk to a central unit. During a fire, nobody knows the state of the doors.

In the field today. The current generation makes the control part of the door chain wireless: door status is monitored and doors are opened and closed from the central touch panel; battery-powered button transmitters at remote points such as the guard booth or on forklifts send open commands to the door receiver over 433 MHz. The door receiver has relay outputs; frequency, channel and output power are set from its LCD menu.

New generation. A wireless door controller at every door: lock relay, door contact, request-to-exit (REX) button and MIFARE reader are wired locally, and the controller talks to the central unit over 433 MHz LoRa. The permission table is cached at the door, so cards are still read if the central unit is offline; events (card, door held open, forced entry, remote open) are sent to the central unit and logged. The door map, manual open/close, zone- and time-based access levels and anti-passback (on doors with entry and exit readers) are managed from the touch panel or a web interface. The reader, event log and web interface are targets of the new generation.

Fire integration. When integrated with the Wireless Fire Alarm System (Firesens), the assigned doors open or lock automatically on an alarm, and door status appears on the fire map.

Features

  • Wireless door receiver: a relay-output receiver at the door talks to the central panel and the button transmitters over 433 MHz RF; no control cable to the door.
  • Touch-screen door panel: door status and manual open/close at the central station.
  • Remote open button: battery-powered button transmitter for the guard booth, forklifts and barriers.
  • Firesens-linked door control: an assigned door profile (open / lock) on fire alarm; door status shown on the Firesens fire map.
  • TargetWireless door controller: lock, door contact, request-to-exit (REX) button and reader wired locally at the door; RF to the central unit, no cabling.
  • TargetLocal permission cache: card access keeps working even if the central unit or the RF link is lost; events are buffered.
  • TargetDoor map and web interface: door map and manual open/close on a 7-inch touch panel and via the web.
  • TargetAccess management: anti-passback, access levels, time zones, visitor cards.
  • TargetEvent log and reporting: who, which door, when; CSV and web reports; “door held open” and “forced entry” alarms.
  • TargetRemote button with ACK LED: battery-powered remote open button and door-contact transmitter based on the Wireless Call Button Platform.
  • TargetOptions: keypad (card + PIN), exit reader, turnstile/barrier interface, 125 kHz reader, WR-001 pocket notifications; BLE/mobile credentials have been trialed and are under evaluation.

System components

System components
Model codeComponentHardwareStatusRequest a quote
KD-RX (RX-KD v2.0.0)Door receiver (relay + LCD)PIC16F887 + CC1101In the fieldRequest a quote: KD-RX (RX-KD v2.0.0)
KD-TXDoor-open button transmitterPIC16F887 + CC1101In the fieldRequest a quote: KD-TX
KD-PNL-TFTCentral touch panel (multi-door)dsPIC33 + TFT + CC1101In the field (customer-specific)Request a quote: KD-PNL-TFT
KD-N3-CTRLTargetDoor controller: 2 lock relays, door contact, request-to-exit (REX) button, reader portEM-G0L-433 + EC-DIO8 (carrier board)PlannedRequest a quote: KD-N3-CTRL
KD-N3-RDRTargetMIFARE 13.56 MHz reader (Wiegand/UART); optional keypadRC522/SL031-class reader + EM-G0NPlannedRequest a quote: KD-N3-RDR
KD-N3-GWTargetCentral unit: event log, permission table, anti-passback, web/ModbusWireless Gateway / RTU (EM-G0LW-433)PlannedRequest a quote: KD-N3-GW
KD-N3-PNLTargetTouch panel (door map, manual open)DWIN T5L panel + EM-G0LPlannedRequest a quote: KD-N3-PNL
KD-N3-BTNTargetRemote open button / door-contact transmitter (battery-powered)CB1-W-P (Wireless Call Button Platform)PlannedRequest a quote: KD-N3-BTN

Specifications

Current system
Frequency433 MHz (CC1101); channel selection via the menu
Output power≤ +10 dBm, adjustable via the menu
Receiver sensitivity~−104 dBm (approx.)
Modulation(G)FSK
Packet validationSystem ID + CRC
Separating systems on one siteBy channel and ID
Receiver relays1–4 relays (based on the well/tank control board)
Door receiverBox-type housing with LCD menu
Central panel4.3 / 7-inch TFT touch screen (dsPIC)
AntennaReceiver/controller: SMA; panel: internal or SMA; button: internal
Radio (new generation)
Frequency band433.05–434.79 MHz, 8 channels (LoRa)Target
Output power+22 dBmTarget
Receiver sensitivity−129 dBm @ SF11Target
ModulationLoRa SF7–9Target
Range (new generation)
Open field / campus≥ 1000 m (SF8, external omni antenna)Target
Indoors≥ 150 m / 3 floorsTarget
Communication & security
RF encryptionAES-128 + counter; NetID + 16-bit addressTarget
Separating systems on one site8 channels × NetIDTarget
Card technologyMIFARE 13.56 MHz (ISO 14443A): Classic 1K/4K, DESFire EV1/EV2 UID; 125 kHz EM optionalTarget
Access rightsAccess levels by group × door × time zone; hard/soft anti-passbackTarget
Event log100,000 events (central unit); 1,000-event buffer at the doorTarget
Performance & fail-safe
Card → lock< 300 ms (from the local cache)Target
Remote open → lock< 500 msTarget
Loss of communicationThe door keeps working locally; the central unit flags it offline after 3 unanswered pollsTarget
Inputs / outputs (new generation)
Relay outputs2 × lock/barrier + 2 × alarm/siren (EC-DIO8: 8 relays)Target
Digital inputsDoor contact, REX, tamper, barrier photocell (EC-DIO8: 8 digital inputs)Target
Interfaces
Reader interfaceWiegand 26/34 or UARTTarget
Central interfacePanel: UART; central unit: Ethernet/Wi-Fi web interface, Modbus TCP, MQTTTarget
Touch panel7-inch DWINTarget
Mechanical & environmental (new generation)
Door controllerDIN rail or IP65 boxTarget
ReaderWall-mount 86 × 86 mm; IP65 outdoor optionTarget
Remote buttonBattery-powered (Call Button Platform)Target
Operating temperatureController −20…+60 °C; reader −25…+60 °CTarget
Warranty & service
Warranty2 yearsTarget
ServiceAnkara; locks and readers carry their manufacturers' warranties
HardwareComing soon

Smart Motion & Environmental Sensors

Temperature, humidity, wind and doors across the site — wireless, on battery-powered nodes.

The problem. Environmental quantities are critical in industrial sites but often go unmeasured: cold-room temperature, humidity in chemical stores, wind on crane and port yards (load sway, crane lock-out rules), panel and ambient temperature on solar farms, tank and well covers left open, motion outside working hours. There is no cable route for a wired sensor network; Wi-Fi/BLE sensors struggle with coverage and batteries; cloud IoT sensors require subscriptions and closed platforms. Alarms such as high wind or temperature drift do not reach anyone in time.

The solution. The sensor node family fits different sensor heads onto a single battery-powered LoRa node. The node sends periodic measurements (e.g. every 10 minutes) and an instant alarm packet when a threshold is crossed; the Wireless Gateway / RTU passes the data to SCADA or to the Telemetry & Process Intelligence layer via Modbus, MQTT or CSV, and WR-001 carries alarms to the staff member's pocket. The mains-powered version adds a local relay output: a crane lock relay when the wind limit is exceeded, a fan when a temperature threshold is crossed.

The family. The anemometer housing and PCB are designed by Elmes; the temperature-humidity node moves from the earlier SHT11-based design to modern SHT3x/SHT4x sensors; the level and door-contact nodes are derived from existing I/O firmware. Thermal, infrared and laser sensors are planned members of the family; they have no prototypes yet and are listed as coming soon.

Features

  • One node, interchangeable heads: temperature-humidity, anemometer, level and door/motion heads share one PCB family; the firmware profile recognizes the fitted head.
  • Local threshold relay (mains-powered): wind limit → crane lock; temperature → fan/heater; works without a central unit.
  • Elmes-designed anemometer housing: cup rotor, wind vane and body; 3D-printed prototype; gust and average values are computed on the node.
  • LED display option: a large temperature-humidity display (P10 LED panel) for warehouses and production areas.
  • TargetOptions: solar power, 868 MHz version, WR-001 pocket alarms, hydrostatic level, dual-technology PIR.
  • TargetEvent buffer and alarm-rate reporting: events are buffered on the node; reporting frequency increases during an alarm.
  • TargetSensor fusion: prediction and early warning from multiple nodes' data in the Telemetry & Process Intelligence layer, shared with Firesens. The AI-assisted false-alarm filter runs in this layer, not on the node.
  • TargetThermal, infrared and laser sensors: a thermal camera, infrared beam barrier and laser distance sensor are planned members of the family; there are no prototypes yet.

Sensor family

Sensor family
Model codeSensorMeasurementOutputPowerStatusRequest information
SN-THTargetTemperature-humidity (SHT3x/SHT4x)−40…+125 °C, 0–100 %RHLoRa; optional LED displayBatteryPrototype; being updated with a new sensorRequest information: SN-TH
SN-WSAnemometer + wind vaneWind speed 0–50 m/s, direction in 16 sectorsLoRa; wind-limit relay (mains-powered)Battery / solarPrototypeRequest information: SN-WS
SN-LVLevel: 4-step float / hydrostatic 4–20 mALevel steps / cmLoRaBatteryBase design in the field (well/tank control)Request information: SN-LV
SN-DCTargetDoor/cover contact + tamperOpen/closed, time held openLoRaBatteryPlannedRequest information: SN-DC
SN-PIRTargetMotion (PIR) + door contactMotion eventLoRaBatteryPlannedRequest information: SN-PIR
SN-TPTargetTemperature probe (PT100 / thermocouple / DS18B20)−50…+400 °C (depending on probe type)LoRaBatteryPlannedRequest information: SN-TP
SN-IR / SN-LZ / SN-THCTargetInfrared beam barrier / laser distance / thermal camera———Planned; no prototype yetRequest information: SN-IR / SN-LZ / SN-THC

Specifications

Radio
Frequency / channels433.05–434.79 MHz, 8 channels (SX1268); 868 MHz version
Output power / sensitivity+14…+22 dBm / −129 dBm @ SF11
ModulationLoRa SF7–12; packets ≤ 32 bytes
AntennaInternal or u.FL → SMA on the housing; SMA on the anemometer mast
Range
Open field≥ 3000 m (SF10, 2 dBi external antenna, 3 m height)Target
Indoors / warehouse≥ 150 mTarget
Communication & security
Encryption / addressingAES-128-CCM; NetID + 16-bit addressTarget
PairingRegistration on the gateway by UID
Reporting interval1 min–24 h; immediate on alarm (< 2 s)
Offline detectionAfter 3 missed reports
Power
BatteryLi-SOCl2 AA/C 3.6 V or 2×AA; < 10 µA in sleep; measurement + TX ~120 mA × 100 ms
Battery life≥ 3 years @ 10 min reporting (temperature-humidity, door); solar panel + Li-ion recommended for the anemometer, which counts continuouslyTarget
Mains-powered version9–36 VDC; relay output via the EC-DIO8 carrier board
Measurement
SN-TH temperature-humiditySHT3x/4x capacitive: −40…+125 °C ±0.2 °C, 0–100 %RH ±2 %RH (datasheet); earlier SHT11 design ±0.4 °C / ±3 %RH
SN-WS windCup anemometer (pulse) + wind vane (Hall/pot): 0–50 m/s after calibration; direction in 16 sectors ±11°Target
SN-WS starting threshold≤ 1 m/sTarget
SN-LV level4-step float (contact)
SN-LV hydrostatic level4–20 mA, 0–5 mTarget
SN-DC door contactMagnetic contact; open/closed, time held open; tamper
SN-PIR motionPIR 90–110°, 8–12 m (module datasheet); dual technology optionalTarget
SN-IR / SN-LZ / SN-THCInfrared beam barrier 5–100 m, laser distance, thermal camera; no prototype yetTarget
Sensitivity settingsUpper/lower threshold + hysteresis, N consecutive samples, gust filter; PIR sensitivity levels
False-alarm measuresHysteresis, consecutive samples, sensor fault flag
Multi-sensor fusionIn the Telemetry & Process Intelligence layerTarget
Inputs / outputs
Output typeLoRa (standard); 2 × 5 A relays (mains-powered version); no 4–20 mA output (Modbus via the gateway)
Additional inputs2 × contact, 1 × analog 4–20 mA / 0–10 VTarget
Service interfaceSWD / UART
Mechanical & environmental
Node housingIP65 wall box, approx. 100 × 100 × 60 mmTarget
Anemometer bodyElmes 3D design, ABS/ASA print; mast clamp
Anemometer production bodyInjection-moldedTarget
MountingWall / mast / ceiling (PIR)
Operating conditions−30…+60 °C (Li-SOCl2); 100 % humidity (IP65/67); no anti-icing heater on the anemometer
Warranty & service
Warranty2 years; batteries and sensor heads are consumablesTarget

03 · Products

Modules, Boards & Gateways

The LoRa, Wi-Fi and cellular modules at the core of Elmes products; I/O carrier boards, gateway/RTU, antennas and the production/SDK kit.

HardwareComing soon

Elmes EM Module Series

One pinout, one SDK — LoRa, Wi-Fi and cellular in a single module family.

The problem. When a machine or device manufacturer wants to add wireless features, it runs into three obstacles: (1) RF design and the matching network require expertise, and range and interference problems surface in the first prototype; (2) RED/EMC testing and the documentation burden repeat for every new product; (3) off-the-shelf Far East modules are cheap, but their firmware is closed, their pinout and supply change with the next revision, and there is no local support in Turkish.

The solution. The EM series opens up the MCU + radio module that Elmes uses in its own products: a measured radio path, an open SDK and bootloader, a fixed pinout and a documented production test. The integrator only writes the carrier board and the application code; the radio, power management and update infrastructure are ready. Because the same pinout is shared by the LoRa (L), Wi-Fi/BLE (W), cellular (C) and combined LoRa + Wi-Fi (LW) members, a product family can offer different connectivity options from a single PCB design.

The family. The common MCU is the STM32G0 (Cortex-M0+). EM-G0L-433 is the main MCU + LoRa member; EM-G0LW-433 combines LoRa and Wi-Fi/BLE in a gateway core; EM-NL-433 is a radio-only module for designs that already have their own MCU. EM-G0W is the Wi-Fi/BLE member, EM-G0C the cellular member, EM-G0N the radio-less core and EM-W5L-433 the STM32WLE5 integrated LoRa member. MOD-M0, already in the field, provides a migration path to the new series with the same software.

Ecosystem. The modules are used on I/O carrier boards with relay, analog, RS485 and pulse-counter interfaces; a fixture and SDK package covers programming, production testing and software development.

Features

  • Bootloader + OTA: updates over UART/USB and LoRa/Wi-Fi; the infrastructure comes from DiscOS and the Elmes well and tank control products.
  • ID and channel programming: ID, channel and calibration data are written in production and can be changed in the field.
  • Low-power profiles: STOP mode, wake-up sources and battery measurement (in the EM-G0L-433-LP version).
  • Telemetry report: RSSI/SNR, battery and temperature; already in use on Firesens fire alarm boards.
  • ESP bridge (W): the STM32 handles real-time control, the ESP32 handles communication only; standard UART protocol.
  • Dual radio (LW): LoRa on the field side + Wi-Fi/BLE for local access and configuration.
  • TargetCommon pinout standard: the same pad layout on every member; the connectivity option changes without changing the carrier board.
  • TargetOpen SDK (Apache-2.0): HAL, radio driver, bootloader, protocol core and examples delivered as source code.

Family members

Family members
Model codeContentsStatusRequest information
EM-S0L-433-M0MOD-M0: STM32F070 + SX1268, legacy pin-header footprintIn the fieldRequest information: EM-S0L-433-M0
EM-G0L-433STM32G0 + SX1268 LoRa, castellatedNewRequest information: EM-G0L-433
EM-G0WSTM32G0 + ESP32 (Wi-Fi/BLE)NewRequest information: EM-G0W
EM-G0LW-433STM32G0 + SX1268 + ESP32 (LoRa + Wi-Fi/BLE gateway core)NewRequest information: EM-G0LW-433
EM-NL-433Radio-only SX1268, SPI interfaceNewRequest information: EM-NL-433
EM-G0K-433 / EM-NK-433Low-cost LLCC68 LoRa (with MCU / radio-only)NewRequest information: EM-G0K-433 / EM-NK-433
EM-G0L-868 / -915, EM-NL-868SX1262 band variants (868 / 915 MHz)NewRequest information: EM-G0L-868 / -915, EM-NL-868
EM-G0NMCU-only core (no radio)NewRequest information: EM-G0N
EC-DIO8 / EC-AIO / EC-485 / EC-PLSI/O carrier boards (digital, analog, RS485, pulse counter)NewRequest information: EC-DIO8 / EC-AIO / EC-485 / EC-PLS
EM-G0CCellular 4G / NB-IoTNewRequest information: EM-G0C
EM-G0L-433-LPBattery-powered LoRa node versionNewRequest information: EM-G0L-433-LP
EM-S7L-433TargetSTM32H7 + LoRaPlannedRequest information: EM-S7L-433
ET-FIX-EM / ET-SDK-EMProgramming/test fixture + SDK packageNewRequest information: ET-FIX-EM / ET-SDK-EM
EM-W5L-433STM32WLE5 integrated MCU + LoRaNewRequest information: EM-W5L-433

Specifications

Architecture
Common MCUSTM32G0 (Cortex-M0+); G0B1 on a single footprint (USB-FS, CAN-FD; CBT6 128 KB, CET6 512 KB flash); G071 (no USB) for price-critical versions
Connectivity optionsLoRa 433 MHz (SX1268), LoRa 868/915 MHz (SX1262), low-cost LoRa (LLCC68), Wi-Fi/BLE (ESP32), LoRa + Wi-Fi/BLE, cellular 4G/NB-IoT, STM32WLE5 integrated LoRa, radio-less core
Interfaces
PinoutCommon pinout standard across all members; castellated pads in the new seriesTarget
Exposed interfacesSWD, UART, SPI, I2C
Internal layoutRadio SPI1, USB, SWD and ESP-bridge USART placement as on MOD-M0; retained in the new series
Antenna connectoru.FL / SMA
Radio
How RF values are statedEvery RF value in two columns: chip datasheet and Elmes measurement (date, equipment, antenna, distance); range is stated only as measured
Test equipmentSpectrum analyzer, RF power meter, antenna analyzer, SWR meter (in-house at Elmes)
Range
Previous-generation field test35 km — line of sight, J-pole antenna, +20 dBm (100 mW), 2.4 kbaud (CC1101-based generation)
Previous-generation safe rangeInstalled devices operating at 10 km
New seriesAt least equal to the previous generation (SX1268, +22 dBm, LoRa SF9–SF12)Target
Power
Supply3.3 V
Software
UpdatesBootloader; OTA over UART/USB and LoRa/Wi-Fi
ID programmingID, channel and calibration written in production; changeable in the field
Licensing & support
Open SDKApache-2.0: HAL, radio driver, bootloader, protocol core, examplesTarget
Pro layerElmes product application layer, network profiles (repeater/mesh), fleet/OTA server tools and production scripts are licensed separately
SupportTechnical support in Turkish; design and production in Ankara
Mechanical & environmental
MountingCastellated SMD in the new series; pin header on MOD-M0
Operating temperature−40…+85 °CTarget
Warranty & service
Warranty2 yearsTarget
Spare-parts support5 years
EM-G0L-433Coming soon

STM32 + SX1268 LoRa Module (EM-G0L-433)

A field-proven LoRa path in a castellated module.

The problem. A manufacturer that wants to add wireless features faces RF design risk, a RED/EMC documentation burden that repeats for every product, and imported modules with closed firmware. For long-range, low-data-rate industrial control and telemetry at 433 MHz, neither a Wi-Fi module nor 2.4 GHz solutions are enough; LoRa is the right physical layer for getting through walls and terrain and for battery-powered nodes.

The solution. EM-G0L-433 combines an STM32G0 (Cortex-M0+) and an SX1268 in a single castellated module; the matching network, TCXO and PA path come measured by Elmes. The integrator only writes the carrier board and the application code. Variants of the same PCB (battery-powered LP, low-cost K, 868/915 MHz) are managed with a single validation and a single BOM family.

The difference. Off-the-shelf imported LoRa modules either have no MCU (radio only) or a closed one; on EM-G0L-433 the MCU is open and programmed with the SDK. Shared features such as the bootloader, OTA, ID programming and low-power profiles are described on the EM Module Series page.

Features

  • Pin-compatible variants: battery-powered node (EM-G0L-433-LP), low-cost LLCC68 (EM-G0K-433) and SX1262-based 868/915 MHz (EM-G0L-868 / -915); all on the same PCB.
  • USB-DFU and CAN-FD: USB-DFU bootloader on the G0B1 version; CAN-FD with a transceiver on the carrier board.
  • TCXO-based radio: frequency stability and reliable cold start.
  • Telemetry report: RSSI/SNR, battery and temperature data (SDK).
  • Open MCU: the application runs directly on the module's STM32; no separate host MCU is needed.
  • Shared across the series: bootloader + OTA, ID/channel programming and low-power profiles; details on the EM Module Series page.

Variants

Variants
Model codeMCURadioPower pathUSBNoteRequest information
EM-G0L-433STM32G071CBT6 (first build) → G0B1CBT6SX1268Standard LDOG0B1 version onlyMain memberRequest information: EM-G0L-433
EM-G0L-433-LPG071 / G0B1SX1268Low-Iq LDO, battery measurement—Battery-powered node versionRequest information: EM-G0L-433-LP
EM-G0K-433G071 / G0B1LLCC68Standard—Low costRequest information: EM-G0K-433
EM-G0L-868 / -915G071 / G0B1SX1262Standard—868 / 915 MHz band variantRequest information: EM-G0L-868 / -915

Specifications

Radio
Frequency band410–525 MHz (SX1268); Elmes channel plan 433.05–434.79 MHz (ISM)
Channels8 channels: 433.05–434.79 MHz, 200 kHz spacing, 125 kHz bandwidth
Output power+22 dBm (SX1268 PA); adjustable −9…+22 dBm
Receiver sensitivity−129 dBm @ SF11/BW125; −137 dBm @ SF12 (chip datasheet)
ModulationLoRa (SF5–SF12), (G)FSK
Data rateLoRa 0.018–62.5 kbps; FSK 300 kbps
Antenna connectionu.FL and a castellated antenna pin (SMA/pigtail on the carrier); 50 Ω; selected with a 0 Ω jumper or as a build option
Range
Open field≥ 2000 m (SF9, 2 dBi dipole, 2 m height)Target
Industrial / indoor≥ 300 mTarget
Communication & security
EncryptionAES-128-CCMTarget
Addressing and pairingNetID + 16-bit address; pairing by UID
Systems on the same site≥ 8 independent networks (channel × NetID)Target
Performance & fail-safe
Command latency< 100 ms (SF7, short packet)Target
Fail-safe on link lossApplication-defined; SDK timeout 1–60 s
Power
Supply3.0–3.6 V (module); 9–36 VDC on the carrier
Consumption TX / RX~118 mA @ 22 dBm / ~5 mA
Sleep current< 10 µA (EM-G0L-433-LP)Target
Architecture
MCUSTM32G071CBT6 → G0B1CBT6; 64 MHz Cortex-M0+, 128 KB flash (G0B1CET6: 512 KB variant)
Interfaces
Exposed pins (minimum)SWD, 2× UART, 1× SPI, 1× I2C, 8× GPIO, 2× ADC inputs, USB (G0B1), NRST, BOOT0
Mechanical & environmental
Pad count / pitch2× 16 castellated pads, 1.27 mm
Dimensions≤ 20 × 25 mm
MountingCastellated SMD; keep-out area on the antenna side
Operating / storage temperature−40…+85 °C / −40…+105 °CTarget
Humidity5–95 %, non-condensing
Warranty & service
Warranty2 yearsTarget
Spare-parts support5 years
ProductionAnkara
EM-G0LW-433Coming soon

STM32 + SX1268 + ESP32 Module (EM-G0LW-433)

LoRa on the field side, Wi-Fi on the central side — a gateway core in one module.

The problem. Every Elmes RF system has a “central end”: the fire alarm gateway, the irrigation master, the taxi call receiver, the well and tank receiver. Until now these were built with separate boards, different MCUs and different connection paths (USB-CDC, Raspberry Pi, GSM–CAN). For every new product the LoRa radio, connectivity and power were designed again, and placing Wi-Fi and LoRa on the same board caused coexistence problems each time.

The solution. EM-G0LW-433 standardizes this central end in a single module. The STM32G0 manages the LoRa network (addressing, ACK, timing, local I/O and RTU logic); the ESP32 is only a Wi-Fi/BLE “modem” and uses the same bridge protocol as EM-G0W: data to the Telemetry & Process Intelligence platform over MQTT/HTTP, maintenance through a local web interface, and phone access over BLE. USB (G0B1) keeps PC-side gateway use available. Ethernet and a 4G modem are added on the carrier board (EC-GW carrier, EM-G0C cellular module).

RF coexistence is solved once, at module level: separate antennas, a harmonic filter on the 433 MHz PA output, separate power domains and timing in the SDK (planned: deferring Wi-Fi transmission during the LoRa receive window). The module's main user is the Wireless Gateway / RTU product.

Features

  • Dual radio, single SDK: the LoRa network manager role (NetID, address table, ACK, repeater profile — Pro layer) and the ESP bridge protocol in the same application.
  • Gateway modes: USB-CDC bridge (PC application), MQTT/HTTP, Modbus RTU/TCP (via the EC-485 or Ethernet carrier), local RTU logic.
  • OTA distributor: the gateway broadcasts OTA updates to the nodes over LoRa and receives its own image over Wi-Fi/USB.
  • RF coexistence measures: separate antennas, a low-pass filter (LPF), separate LDOs and timing in the SDK.
  • CAN-FD (G0B1): with a transceiver on the carrier; continues the GSM–CAN gateway applications.
  • Pin-compatible 868/915 MHz version: SX1262-based EM-G0LW-868 / -915 on the same PCB.
  • Shared across the series: bootloader, ID programming and telemetry; details on the EM Module Series page.
  • TargetEdge AI: local analytics on the gateway; may require an STM32H7-class MCU.
  • TargetLocal maintenance interface: node list, RSSI/SNR map, channel plan and OTA distribution over Wi-Fi AP/BLE.
  • TargetLow-cost version: LLCC68-based EM-G0KW-433, on demand.

Variants

Variants
Model codeMCULoRaESP moduleUSBNoteRequest information
EM-G0LW-433STM32G0B1CBT6 (gateway requiring USB); G071 only in USB-less prototypesSX1268Same ESP32 MINI module as EM-G0WG0B1Main memberRequest information: EM-G0LW-433
EM-G0LW-868 / -915G0B1SX1262SameG0B1868 / 915 MHz band variantRequest information: EM-G0LW-868 / -915
EM-G0KW-433TargetG0B1 / G071LLCC68Same—Low-cost central unit; on demandRequest information: EM-G0KW-433

Specifications

Radio — LoRa
Frequency band410–525 MHz (SX1268); Elmes channel plan 433.05–434.79 MHz
Channels8 (same as EM-G0L-433): 200 kHz spacing, 125 kHz bandwidth
Output power+22 dBm (SX1268 PA), adjustable −9…+22 dBm
Receiver sensitivity−129 dBm @ SF11/BW125 (chip datasheet)
Sensitivity loss during Wi-Fi TX≤ 1 dBTarget
Modulation / data rateLoRa SF5–SF12, (G)FSK; LoRa 0.018–62.5 kbps
Radio — Wi-Fi / BLE
Frequency band2400–2483.5 MHz; 802.11 b/g/n, BLE 5
Output power / sensitivity≈ +20 dBm class / ≈ −97 dBm @ 11b (Espressif datasheet)
Antenna connectionu.FL + antenna pin (2.4 GHz), 50 Ω; separate from the LoRa antenna
Radio — coexistence
Antenna placementAntennas on opposite edges; LPF on the 433 MHz PA output
Antenna spacing / isolation≥ 15 mm / ≥ 30 dB @ 2.4 GHzTarget
Range
LoRa open field / indoor≥ 2000 m (SF9, 2 dBi dipole, 2 m height) / ≥ 300 m — same as EM-G0L-433Target
Wi-Fi indoor (to AP)≥ 30 mTarget
Communication & security
EncryptionLoRa: AES-128-CCM; MQTT: TLS 1.2Target
Addressing / Wi-Fi securityLoRa: NetID + 16-bit address + UID; Wi-Fi: WPA2/WPA3
Systems on the same site≥ 8 independent LoRa networks (channel × NetID)Target
Managed nodesAddress space 65,536; ≥ 256 nodes @ 1 report per minuteTarget
Performance & fail-safe
Command latencyLoRa end-to-end < 100 ms (SF7); LoRa → MQTT < 200 ms (local network)Target
Fail-safe on link lossNode timeout 1–60 s (SDK)
On Wi-Fi lossLocal operation continues, data is bufferedTarget
Power
Supply3.0–3.6 V (module); 9–36 VDC on the EC-GW carrier; separate LDOs for MCU/LoRa and ESP
ConsumptionLoRa TX ~118 mA @ 22 dBm; Wi-Fi TX peak ≈ 350 mA (approximate); no sleep mode foreseen
Architecture
MCUSTM32G0B1 (USB-FS, CAN-FD); 128 KB (CBT6) or 512 KB (CET6) flash; G071 only in USB-less prototypes
Internal connectionsSPI1 ↔ SX1268 (DIO1/DIO2/BUSY/RST); UART ↔ ESP (RTS/CTS, ESP_EN, ESP_IO0, HOST_INT)
Interfaces
Exposed pins (minimum)Series-wide layout: SWD, 2× UART, 1× SPI, 1× I2C, 8× GPIO, 2× ADC, USB, NRST, BOOT0
CAN-FDTX/RX (G0B1), shared with GPIOTarget
Mechanical & environmental
Pad count / pitch2× 16 castellated, 1.27 mm (series-wide)
Dimensions≤ 20 × 25 mm (series-wide); 25 × 32 mm if it does not fit, with the pad layout retainedTarget
MountingCastellated SMD; keep-out areas on both antenna sides
Operating / storage temperature−40…+85 °C / −40…+105 °CTarget
Humidity5–95 %, non-condensing
Warranty & service
Warranty2 yearsTarget
Spare-parts support5 years
ProductionAnkara
EM-NL-433Coming soon

Radio-only LoRa Module (EM-NL-433)

A measured LoRa radio path, connected to the MCU of your choice over SPI.

The problem. Some Elmes products (crane receivers/transmitters, the RT152 data transmitter family) already have an MCU that is not going to change; all they need is a LoRa radio. Today that gap is filled by imported off-the-shelf radio modules: single source, closed design, pinouts that change between revisions and no documentation in Turkish. Designing around a bare SX1268 instead means repeating the matching network and measurements for every product.

The solution. EM-NL-433 takes the radio section of the EM-G0L-433 module and makes it a separate castellated module: SX1268 + 32 MHz TCXO + RF switch (controlled by DIO2) + matching and harmonic filter + u.FL/antenna pin. The interface is plain SPI + BUSY/DIO1/NRESET with 3.3 V logic. The driver is open and platform-independent.

Variants. The same PCB takes LLCC68 (EM-NK-433) and SX1262 (868/915 MHz) versions. In Elmes products it replaces the imported off-the-shelf module; for other manufacturers it offers a “take the radio, keep your MCU” option.

Features

  • Shared RF design: the same radio path as EM-G0L-433; 868 MHz (SX1262) and LLCC68 versions with a single validation and a single BOM change.
  • Driver support: common SX126x/LLCC68 API; the host HAL needs only 5 functions.
  • On-module TCXO and DC-DC: no crystal or regulator needed on the host side.
  • Production test: RF power and frequency measurement on the programming/test fixture; no host MCU needed, the fixture drives SPI directly.
  • TargetHost examples: example projects for STM32, ESP32 and PIC24 (RT152 migration).
  • TargetSeparate TX/RX pins: pads reserved to replace the RF switch in a future high-power PA version.
  • TargetPortable protocol core: the host MCU joins the EM network (same NetID/addressing as EM-G0L-433 nodes).

Variants

Variants
Model codeRadioBandNoteRequest information
EM-NL-433SX1268433 MHzMain memberRequest information: EM-NL-433
EM-NK-433LLCC68433 MHzLow-cost versionRequest information: EM-NK-433
EM-NL-868 / -915SX1262868 / 915 MHzBand variantRequest information: EM-NL-868 / -915

Specifications

Radio
Frequency band410–525 MHz (SX1268); Elmes channel plan 433.05–434.79 MHz
Channels8 (same as EM-G0L-433); the host can define its own channel plan
Output power+22 dBm (SX1268 PA), adjustable −9…+22 dBm
Receiver sensitivity−129 dBm @ SF11/BW125 (chip datasheet)
ModulationLoRa SF5–SF12, (G)FSK
Data rateLoRa 0.018–62.5 kbps; FSK 300 kbps
Frequency reference32 MHz TCXO (powered from DIO3)
TCXO stability±2 ppm class (depending on part selection)Target
Antenna connectionu.FL and antenna pin, 50 Ω; selected with a 0 Ω jumper or as a build option
Interfaces
Host interfaceSPI (≤ 16 MHz), NSS, BUSY, DIO1 (IRQ), NRESET; 3.3 V logic; DIO2 (RF switch) on the module
Reserved padsDIO2 output, TXEN/RXEN (for a future PA version)Target
Range
Open field≥ 2000 m (SF9, 2 dBi dipole, 2 m height) — same test as EM-G0L-433Target
Industrial / indoor≥ 300 mTarget
Communication & security
Encryption / addressingIn the host protocol; AES-128-CCM, NetID + 16-bit address with the portable EM-SDK coreTarget
Systems on the same site≥ 8 (channel × NetID, host protocol)Target
Performance & fail-safe
TX start-up (sleep → RF)< 5 ms class (TCXO + PLL; from chip datasheet values)Target
Fail-safe on link lossDefined by the host application
Power
Supply3.0–3.6 V; DC-DC (internal) or LDO mode, selected in the driver
Consumption TX / RX / sleep~118 mA @ 22 dBm / ~5 mA (DC-DC) / < 1 µA (sleep, TCXO off) — chip datasheet
Mechanical & environmental
Pad count / pitch2×8 castellated, 1.27 mm (edge aligned with EM-G0L-433): VCC, GND×3, SCK, MISO, MOSI, NSS, BUSY, DIO1, NRESET, ANT + 4 reserved pads
Dimensions≤ 14 × 20 mmTarget
MountingCastellated SMD; keep-out area on the antenna side
Operating / storage temperature−40…+85 °C / −40…+105 °CTarget
Humidity5–95 %, non-condensing
Warranty & service
Warranty2 yearsTarget
Spare-parts support5 years
ProductionAnkara
EC-DIO8 / EC-AIO / EC-485 / EC-PLSComing soon

I/O Carrier Boards (EC)

Plug in the module, wire the terminals — your wireless I/O box is ready.

The problem. In a wireless control project, the module is the small part of the job; most of the time goes into relays, opto-isolated inputs, 4–20 mA measurement, RS485 isolation, 24 V supply protection, terminal layout and the enclosure. In Elmes's existing products (Wireless Well & Tank Control System, Wireless Analog & Digital Data Transmitter, Wireless RS485 Modem), these blocks were redrawn on a separate PCB for every product; an external customer who buys a module has to do the same work from scratch and fights EMC, relay and power-supply problems in the first prototype.

The solution. The EC series separates the function circuitry from the module: the module carries the radio and MCU, the carrier board handles the field side. Five function boards (digital, analog, serial, pulse, gateway) and one wide digital board share the same module socket and the same common block (power, service connector, antenna path, LEDs). Elmes products — well/tank control, data transmitter, RS485 modem, Wireless Gateway / RTU, Wireless Digital I/O Link — 8 Channels and Wireless Meter Reading Node — are these boards loaded with application firmware; external customers use the same board with their own firmware or with Elmes's standard Modbus/I/O firmware.

Module and housing. The castellated members of the Elmes Module Series plug into the boards; for applications that need LoRa and Wi-Fi together, the EM-G0LW-433. Two housing options are available: a fast, economical DIN-rail housing or an industrial DIN-rail housing, with the same PCB in both.

Features

  • One footprint: every castellated EM module fits every EC board (LoRa, Wi-Fi, LoRa + Wi-Fi, cellular, no radio).
  • Antenna path choice: u.FL pigtail, or on-board SMA via the antenna pin.
  • Service connector: SWD + UART for the programming/test fixture and field updates.
  • Two housing options: economical and industrial DIN-rail housings, same PCB.
  • Fail-safe table: per-relay timeout behavior (release / hold / last state).
  • EC-GW: one or more of USB, Ethernet and 4G depending on the build; the Wireless Gateway / RTU is built on this board.
  • TargetAutomatic board detection: an ID resistor lets the same firmware pick the I/O map for the board type.
  • TargetStandard I/O firmware profile: wireless I/O mirroring (point-to-point), Modbus RTU slave (wired) and gateway mode; product firmware builds on top of it.
  • TargetEC-PLS non-volatile counters: counter values kept in non-volatile memory; nothing lost on power failure.

Board family

Board family
Model codeFunctionI/OHousing (planned)Related Elmes productsRequest information
EC-DIO8Digital I/O8 × opto DI (12–24 V), 8 × relay NO/NC 5 A6-module DIN railWell/tank control, data transmitter, digital I/O linkRequest information: EC-DIO8
EC-DIO16Wide digital I/O16 × opto DI, 8 × relay (or 16 × transistor)9-module DIN railData transmitter (RT152-M16)Request information: EC-DIO16
EC-AIOAnalog4 × 4–20 mA / 0–10 V input (16-bit), 2 × 4–20 mA / 0–10 V output, 2 × DI, 2 × relay6-module DIN railAnalog data transmitterRequest information: EC-AIO
EC-485Serial bridge1 × isolated RS485 (Modbus RTU), 1 × RS232 (optional), 2 × DI, 2 × DO2-module DIN railRS485 modem (EL485L-S), gateway / RTURequest information: EC-485
EC-PLSPulse / counter4 × pulse input (S0/reed, 10 kHz), 2 × relay2-module DIN railData transmitter, meter readingRequest information: EC-PLS
EC-GWGatewayEthernet (optional), USB, 4G modem slot (EM-G0C), 2 × DI/DO6-module DIN railGateway / RTURequest information: EC-GW

Specifications

Radio
RF characteristicsSet by the fitted EM module (e.g. EM-G0L-433); the board does not affect RF
Antenna connectorOn-board female SMA (antenna pin path) or u.FL pigtail → panel SMA; 50 Ω
RangeModule value; when housed, the antenna is mounted outside via SMA
Identity / encryptionProvided by the module; board type identified by an ID resistor
Performance & fail-safe
Input → wireless → relay latency< 150 ms (SF7; input filter 10 ms + RF < 100 ms + relay 10 ms)Target
Fail-safe on communication loss1–60 s adjustable; default: relays release
Power
Supply9–36 VDC; reverse-polarity diode, TVS, PTC fuse
Idle consumption< 30 mA @ 24 V (module included, RX)Target
Relay coil current~70 mA per relay @ 12 V coil
5 V coil relay option~40 mA per relayTarget
EC-GW peak current2 A class with modem @ 5 V
Inputs / outputs
Digital inputOpto-isolated, 12–24 V, ~3 mA, 10 ms software filter
Input groupingCommon GND or isolated groupTarget
Relay5 A / 250 VAC, NO/NC (SPDT), coil varistor/diode, LED
Transistor output (EC-DIO16 option)Open-drain, 0.5 A, 30 V, protected
Analog input (EC-AIO)4 × 16-bit (ADS1115 class), 4–20 mA (250 Ω) / 0–10 V selectable by jumper
Analog input accuracy±0.1 % FSTarget
Analog output (EC-AIO)2 × 12-bit (MCU DAC or external) + 4–20 mA driver / 0–10 V
Analog output accuracy±0.2 % FSTarget
Pulse input (EC-PLS)4 × S0 (DIN 43864) / reed / open-collector; 10 kHz max.; adjustable debounce; 32-bit counter
Interfaces
RS485 (EC-485)Isolated, 9.6–115.2 kbps, Modbus RTU, 120 Ω termination switch, bias
RS232 (EC-485, optional)3-wire, 115.2 kbps
Gateway (EC-GW)USB-CDC, Ethernet (optional, SPI Ethernet IC), 4G modem slot (EM-G0C), 2 × DI/DO
USB-CDC implementationOn the module MCU or via a bridge ICTarget
Service connectorSWD + UART, 6-pin 1.27 mm (shared with the fixture)
Mechanical & environmental
HousingEconomical or industrial DIN-rail housing; width 2 / 6 / 9 modules (36 / 108 / 162 mm, 1 module = 18 mm)Target
Mounting35 mm DIN rail (EN 60715)
TerminalsPluggable, 5.08 mm, 2.5 mm²
Ingress protectionIP20 (inside a cabinet)
Operating / storage temperature−25…+70 °C (relay/terminal limit) / −40…+85 °C
Humidity5–95 %, non-condensing
Warranty & service
Warranty2 yearsTarget
Spare-parts support5 years
ManufacturingAnkara
HardwareComing soon

Wireless Gateway / RTU

Connect every LoRa node in the field to SCADA, the cloud and PLCs with a single box.

The problem. Once wireless nodes are installed in the field, the end that carries data to the control room is rebuilt for every project: a USB converter on a PC, a Raspberry Pi script, a GSM modem and hand-written protocols. This end is the most fragile part on site: it does not restart after a power cut, data is lost when the connection drops, PLC integration needs a separate converter, and updates have to be done on site.

The solution. The Gateway/RTU turns the central end of the Elmes LoRa network into a standard product. The gateway layer forwards LoRa packets to a server over USB-CDC, Ethernet or 4G using a binary/JSON protocol, and to PLC/SCADA over Modbus TCP; the node list, polling interval and alarm acknowledgment are configured on the device. The RTU layer adds local I/O (carrier boards), a time-stamped buffer (no data loss when the link drops), rule-based local logic (threshold → relay, timers) and an RS485 Modbus master. The Edge-AI layer (planned) uses an STM32H7 to detect anomalies in node data on site and sends only events upstream.

Hardware. The device is built by fitting the EM-G0LW-433 module (STM32 + SX1268 + ESP32) onto the EC-GW board of the I/O Carrier Boards family. The RTU version adds local I/O with EC-DIO8 and EC-AIO boards; the 4G version uses the EM-G0C cellular module.

PC + USB converter + scriptRaspberry Pi gatewayCommercial LoRaWAN gatewayElmes Gateway / RTU
Works with Elmes nodesYes (script)YesNo (LoRaWAN)Yes, natively
Power cuts / headless operationWeakFair (SD card risk)GoodGood (MCU, watchdog)
Modbus TCP / MQTTMust be writtenMust be writtenMQTTBuilt in
Local logic / bufferingNoneScriptNoneRTU layer
4GExternal modemExternalOptionModule (EM-G0C)
Price classLow (fragile)LowMedium–highMedium

Features

  • Three layers on one hardware platform: gateway → RTU → Edge-AI by license and firmware build; same housing and pinout.
  • Elmes node protocol built in: addressing, parameter writes (PARAM_WRITE), broadcast commands, alarm acknowledgment (ACK), status polling.
  • Buffering and retransmission (RTU): lossless time series when the connection drops.
  • Multiple uplinks: USB, Wi-Fi, Ethernet and 4G.
  • Configuration: command-line tool and JSON file import/export.
  • Firesens compatibility: works with the map-based DWIN HMI and PC application of the Wireless Fire Alarm System (Firesens).
  • TargetLocal rule engine (RTU): threshold/timer → relay; local output from a node event (e.g. level → pump).
  • TargetRedundant connectivity: multiple uplinks used as backups for each other.
  • TargetWeb interface: on-device configuration interface running on the ESP32.
  • TargetEdge-AI: anomaly scoring on vibration, meter and level data with an STM32H7, sending only events; predictive maintenance with VibroBal data (Telemetry & Process Intelligence).

Variants

Variants
Model codeLayerModuleUplinkLocal I/OStatusRequest information
EG-GW-UGatewayEM-G0LW-433USB-CDC (PC / Raspberry Pi)—Previous generation in the field (STM32F070 + SX1268, USB)Request information: EG-GW-U
EG-GW-ETargetGatewayEM-G0LW-433Ethernet (EC-GW), Wi-Fi2 DI / 2 DOPlannedRequest information: EG-GW-E
EG-GW-4GTargetGatewayEM-G0LW-433 + EM-G0C4G Cat-1 / NB-IoT + Wi-Fi backup2 DI / 2 DOPlannedRequest information: EG-GW-4G
EG-RTUTargetRTUEM-G0LW-433 + EC-DIO8 / EC-AIO carrier boardsEthernet / 4G8 DI / 8 DO / 4 AI (depending on carrier), RS485PlannedRequest information: EG-RTU
EG-EDGETargetEdge-AI RTUEM-S7L-433 (STM32H7, module series)Ethernet / 4GRTU + on-device modelPlanned (later phase)Request information: EG-EDGE

Specifications

Current system
Previous-generation hardwareSTM32F070CB + SX1268 radio module, USB-CDC
USB protocolUSB-CDC, binary frame [0x55][cmd][len16][payload][CRC8]
PollingConfigurable interval (JSON configuration); immediate alarm acknowledgment
Host serviceRaspberry Pi service, CSV logging
Radio
Frequency band433.05–434.79 MHz ISM (SX1268)
868 MHz optionSX1262-based 868 MHz versionTarget
Channels8 (200 kHz spacing, 125 kHz BW)
Output power+22 dBm max. (SX1268 datasheet), adjustable
Receiver sensitivity−129 dBm @ SF11/BW125 (datasheet)
Modulation / data rateLoRa SF5–SF12, 0.018–62.5 kbps; (G)FSK
Antenna connectorSMA 50 Ω (on board); 433 MHz antenna (RF antenna series)
Range
Open field≥ 2000 m (SF9, 2 dBi, 2 m)Target
Industrial / indoors≥ 300 mTarget
Communication & security
Packet integrity (previous generation)4-byte address + CRC16
EncryptionAES-128-CCM; NetID + 16-bit addressTarget
Systems on the same siteChannel × NetID; ≥ 8 independent networksTarget
Performance & fail-safe
Number of nodes≥ 100 nodes (depending on the polling interval)Target
Node offline detectionN × polling interval (default N = 3)Target
WatchdogHardware watchdog (IWDG)Target
Interfaces
Ethernet / Wi-FiWi-Fi (ESP32, EM-G0LW-433); Ethernet via the EC-GW boardTarget
4GEM-G0C module (Cat-1 / NB-IoT)Target
ProtocolsModbus RTU (RS485) and Modbus TCP server, MQTT client (JSON), USB binary/JSONTarget
ServiceSWD + UART, USB
Power
Supply9–36 VDC (shared with the EC boards) or USB 5 V (EG-GW-U)
Consumption< 3 W (gateway); < 6 W 4G peakTarget
Inputs / outputs
Local I/OEC-GW: 2 DI / 2 DO; RTU: carrier board chain (8 DI / 8 relays / 4 AI / RS485)Target
Mechanical & environmental
HousingDIN-rail housing, 6 modules wide; IP20Target
Warranty & service
Warranty2 years; service in AnkaraTarget
Hardware

Industrial RF Antenna Series

Range is set by the antenna, not the radio — the right antenna, matched to the product.

The problem. Most field failures in wireless control systems come from the antenna, not the radio: a whip antenna stuck to a metal cabinet, a cheap antenna for the wrong band, a long lossy cable, a loose connector, a pigtail that has taken in water. Users look for a stronger radio because “the range is not enough”, yet a 3 dB gain difference or raising the antenna by 2 m gives the same result. Gain claims of imported antennas are often unverified.

The solution. The Elmes antenna series is an accessory list matched to Elmes products, with a defined band and connector for every item: omni whip antennas for inside and outside the cabinet (standard), a directional Yagi for remote points (433 MHz, 8.9 dBi declared), a vertical J-pole at 868 MHz, plus mounts and cable sets. For Elmes Module Series customers, u.FL pigtail and SMA options are on the same list. The goal is for every product page to link to this list through a “recommended antenna” row, with range tables naming the antenna used for the measurement.

Gain values. Gains in the tables are manufacturer datasheet claims. Elmes measurements are published separately, together with the measurement conditions, as they are completed.

Features

  • Defined band and connector: band, connector and cable length of every antenna are listed; 433 and 868 MHz antennas are not mixed up.
  • Yagi feed board: Elmes-designed feed PCB and profile drawings; local manufacturing option.
  • J-pole housing drawing: Elmes housing design; local manufacturing option.
  • Mount set: sheet-metal antenna bracket, ground-plane mast mount and Yagi mount; production drawings ready.
  • TargetProduct matching table: a standard, long-range and in-cabinet antenna row for every Elmes product; range values are measured with that antenna.
  • TargetPigtail and connector standard: u.FL + antenna pin on the module, female SMA on the carrier board, male SMA on external antennas (Elmes Module Series, I/O Carrier Boards).
  • TargetOn-site measurement service: antenna alignment and an RSSI map at the customer site, together with installation and commissioning.

Antenna models

Antenna models
Model codeTypeBandGain (declared)ConnectorStatusRequest a quote
EL-AJP868-1J-pole, vertical; 360° in the horizontal plane850–900 MHz6 dBi (datasheet)BNC, 2.5 m RG-58In the fieldRequest a quote: EL-AJP868-1
EL-AYU447-4Yagi, 4-element, directional430–455 MHz8.9 dBi (datasheet)TNC / BNC / NIn the fieldRequest a quote: EL-AYU447-4
Omni 433 SMAWhip omni433 MHz2 dBiMale SMAStandard accessory (modules and carrier boards)Request a quote: Omni 433 SMA
ERA101TargetShort whip antenna433 / 868 MHzTo be set by measurementMale SMAPlannedRequest a quote: ERA101
ERA103TargetERA catalog model433 / 868 MHzTo be set by measurementMale SMAPlannedRequest a quote: ERA103
ERA105TargetERA catalog model433 / 868 MHzTo be set by measurementMale SMAPlannedRequest a quote: ERA105
ERA203TargetERA catalog model433 / 868 MHzTo be set by measurementMale SMAPlannedRequest a quote: ERA203
ERA401TargetOutdoor mast-type antenna433 / 868 MHzTo be set by measurementMale SMAPlannedRequest a quote: ERA401
ERA802TargetERA catalog model433 / 868 MHzTo be set by measurementMale SMAPlannedRequest a quote: ERA802
AL-103TargetERA catalog model433 / 868 MHzTo be set by measurementMale SMAPlannedRequest a quote: AL-103

Specifications

EL-AJP868-1 · J-pole 868 MHz
Frequency / bandwidth850–900 MHz / 50 MHz
Gain6 dBi (datasheet claim)Target
Beamwidth H / V360° / 15°
VSWR< 1.5
Impedance / polarization50 Ω / vertical
Max. power100 W
Connector optionsTNC / BNC / N
Supplied connector / cableBNC / 2.5 m RG-58
Size / weight20 × 600 mm / 0.25 kg
Wind rating60 m/s
Operating temperature−20…+55 °C
MountingU-bolt clamp
EL-AYU447-4 · Yagi 433 MHz
Type4-element, directional
Frequency band430–455 MHz
Gain8.9 dBi (datasheet claim)
ConnectorTNC / BNC / N
Impedance / VSWR50 Ω / < 1.5Target
Omni 433 SMA
Frequency / gain433 MHz / 2 dBi
VSWR< 1.5Target
ConnectorMale SMA
Cabling & installation
Cable lossRG-58: ~0.35 dB/m @ 433 MHz, ~0.5 dB/m @ 868 MHz (approx., cable datasheet)
Recommended cable length≤ 5 m with RG-58 (≈ 2–2.5 dB loss); for longer runs, LMR-200/400 or move the radio closer to the antenna
Lightning protectionGas-discharge arrester + grounding for outdoor antennas
Warranty & service
Warranty2 years, same as the product it is used with; mechanical damage and water ingress excludedTarget
ET-FIX-EM / ET-SDK-EMComing soon

Module Programming/Test Fixture + SDK Package

Solder the module, drop it in the fixture, build the SDK — production line and firmware ready from day one.

The problem. Selling a module is not enough: the integrator's first question is “how do I program it, how do I test it, how do I update the firmware?” With imported modules, the answer is an AT command set and closed firmware, and production testing is left to the customer. In Elmes' own production, too, testing and programming are done with product-specific scripts and hand-connected SWD cables; they are rewritten for every product and no measurement records are kept.

The solution. ET-FIX-EM is a fixture that holds the castellated module on pogo pins and provides SWD, UART, power/current measurement and the RF output (SMA → attenuator → power meter/spectrum analyzer) over a single USB connection. The test script (the SDK production test protocol) runs the steps in sequence, logs the result against the module's UID, and writes the ID/NetID/channel and calibration values. ET-SDK-EM delivers the same protocol and every software layer of the module (HAL, radio driver, bootloader/OTA, protocol core, examples) under an open license; Elmes product applications and network/fleet tools stay in the Pro tier.

Two license tiers, one code base.

TierContentsLicenseFor
EM-SDK OpenHAL/power/clock layer, shared SX126x-LLCC68-WL radio driver, ESP bridge protocol, bootloader (UART/USB/OTA client), protocol core (framing, NetID/address, ACK, AES-CCM), production test protocol, example applications, documentationApache-2.0 (patent grant, commercial use permitted, Elmes trademark protected)Everyone (module customers)
EM-SDK ProElmes product application layers (crane, well/tank, Firesens…), network profiles (repeater, star management, time slotting), OTA/fleet server tools, production fixture scripts and calibration, signing infrastructure, priority supportClosed; under an NRE/license agreementContract OEMs

The open tier drives adoption of the module and builds trust; that is the real difference from closed imported modules. Open and Pro builds come from the same repository with different build profiles. The bootloader is open; the signature verification key is embedded in the product and the private key stays with its owner — customers can sign their own modules with their own key.

Features

  • EM-SDK Open (Apache-2.0): HAL, shared radio driver (SX126x/LLCC68/WL), ESP bridge protocol, bootloader, protocol core (AES-CCM), production test protocol and examples; free for commercial use.
  • EM-SDK Pro: network profiles (repeater, time slotting), OTA/fleet server tools, fixture scripts and calibration, signing infrastructure, priority support; under contract.
  • Sign with your own key: the bootloader is open; the verification key is written at production and the private key stays with you.
  • Single code base: Open and Pro are built from the same repository with different build profiles, so there are never two diverging code bases.
  • TargetSingle-USB fixture: SWD + UART + power + current measurement + RF path; battery emulation for LP tests; swappable, member-specific pogo plate.
  • TargetTest records: JSON/CSV per module UID; label printer; statistics (yield, RF power distribution).
  • TargetService tool CLI (Open): pairing, NetID/address/channel, RSSI/PER testing, OTA to a single device; fleet OTA is in Pro.
  • TargetBuild profiles: RADIO = sx126x / llcc68 / wl / none; MCU = g071 / g0b1 / wle5 / h7; TIER = open / pro.

Package contents

Package contents
Model codeContentsForLicense / deliveryRequest information
ET-FIX-EMFixture base (with lid and pogo-plate slot) + control board (USB, SWD probe, UART, current measurement, RF SMA output) + 1 module plateProduction line (Elmes), OEM customersHardware saleRequest information: ET-FIX-EM
ET-FIX-EM-xxxMember-specific pogo plate (e.g. -G0L: the shared PCB of EM-G0L-433, EM-G0L-433-LP, EM-G0K-433 and EM-G0L-868/-915; -NL: EM-NL-433; -G0C: EM-G0C; -W5L: EM-W5L-433)Production line (Elmes), OEM customersHardware saleRequest information: ET-FIX-EM-xxx
ET-SDK-EM (Open)EM-SDK Open source code, documentation, examples, production test protocolEveryoneApache-2.0, downloadable from the repositoryRequest information: ET-SDK-EM (Open)
ET-SDK-EM-PROEM-SDK Pro: network profiles, OTA/fleet tools, fixture scripts and calibration, signing infrastructure, priority supportContract OEMsClosed; NRE/license agreementRequest information: ET-SDK-EM-PRO

Specifications

Software
Supported MCUsSTM32G0 (G071/G0B1), STM32WLE5
Additional MCU profilesSTM32H7; STM32F070 (MOD-M0 migration profile)Target
Supported radiosSX1268 / SX1262 / LLCC68 (SPI), STM32WL SubGHz (SUBGHZSPI), ESP32 bridge (UART), cellular modem (AT, EM-G0C)
OS / RTOSBare-metal (super loop + events); FreeRTOS optional; FreeRTOS/DiscOS on H7
Language / buildC11; CMake + arm-none-eabi-gcc; -Wall -Werror
IDE / coding standardSTM32CubeIDE project generator; MISRA subsetTarget
APIHAL (power/clock/WDG/GPIO/ADC), radio (init/tx/rx/sleep/cad/profile), proto (send/recv/ack/addr), boot (ota_begin/chunk/verify/apply), lp (sleep/wake/batt), bridge (esp), net (cellular/Wi-Fi: connect/mqtt)
Application packageSingle image (bootloader + application, signed); DiscOS .dap only in the H7/DiscOS profile
UpdatesUART bootloader; USB-DFU (G0B1); LoRa OTA (chunked, CRC, signature); Wi-Fi/cellular OTA
A/B image partitioningFor LoRa OTA; on G0B1/CETarget
ConnectivityLoRa protocol core (16-bit NetID + 16-bit address + UID + 8 channels, AES-128-CCM), ESP bridge, MQTT/TLS (EM-G0C / EM-G0W)
Memory budget (G071)Bootloader ≤ 16 KB; core + drivers ≤ 48 KB flash, ≤ 12 KB RAM; flash split in half for A/B on G0B1/CETarget
Interfaces
Fixture interfacesSWD (CMSIS-DAP or external ST-LINK socket), UART ×2 (module + ESP), GPIO (BOOT0, NRST, WKUP trigger), USB-C to PC
RF measurement pathSMA output, 20–30 dB attenuator, to a power meter/spectrum analyzer; reference module socket (over-the-air ping)
Power
Module supplyProgrammable 2.2–4.2 V (battery emulation) / fixed 3.3 V; current-limited
Current measurement1 µA–500 mA (two ranges)Target
Performance & fail-safe
Test time< 60 s per module (including RF); < 20 s (EM-G0N, no RF)Target
Mechanical & environmental
Pogo pins1.27 mm pitch, P50 class (Ø0.68 mm), 2×16 + extra rows; plate varies by member
Module alignmentEdge pocket + 2 pins; lid force ~0.5–1 N per pogo pin (datasheet class)
Base size≤ 200 × 150 mmTarget
Operating environment+10…+40 °C, workshop environment
Licensing & support
License modelEM-SDK Open: Apache-2.0 · EM-SDK Pro: closed, under contract
DocumentationAPI reference (Doxygen), guides (TR/EN), protocol specification, production test protocol, examples; release notes (SemVer)
Fixture warranty1 yearTarget
Spare partsPogo-pin consumables, spare plates

04 · Products

Measurement & Balancing

Portable vibration analysis and on-site balancing for rotating machinery.

HardwareComing soon

VibroBal — Portable Vibration Analyzer & Field Balancer

Measure the rotor in place, balance it in place.

The problem. Imbalance in fans, pumps, motors and rotors is the most common source of vibration in industry. To balance a rotor in the field without removing it, plants use imported vibration analyzers (VIBXPERT II class); being multi-channel and multi-function, these are expensive and come with neither a Turkish interface nor local service. Yet balancing services and maintenance teams need only “1X amplitude + phase + single-plane correction” for most jobs.

The solution. VibroBal measures 1X amplitude and phase with a single vibration sensor and an optical tachometer, and a guided wizard (reference run → trial weight → result) gives the correction weight in grams and degrees. The same device shows machine condition with a spectrum (4096 points), time waveform, RMS/peak/crest values and ISO 20816 zone colors. The programmable analog front end selects gain and anti-alias filtering automatically, so the operator never has to deal with signal levels.

Positioning. The aim is not to replace the VIBXPERT II but to cover the most frequently performed subset of its jobs with an affordable, locally made device. Two-plane balancing and multi-channel measurement are out of scope; those jobs are left to a balancing-machine measurement system.

Imported multi-channel analyzer (VIBXPERT II class)Manual calculation + general-purpose scope/multimeterVibroBal
Channels / planes2+ channels, 2 planes—1 channel, 1 plane
Balancing wizardYesNo (manual vector math)Yes, guided
Spectrum / ISO zonesYesNoYes
Interface / serviceEnglish, service abroad—Turkish interface (on the roadmap), service in Ankara
Price classHigh—Mid-range

Features

  • Guided single-plane balancing wizard: REF → TRIAL → RESULT; CAPTURE is enabled only for a valid, unsaturated, phase-synchronous measurement; the suggested trial weight is ~10 % of rotor mass.
  • AUTO front end: gain set by headroom, the tightest analog filter chosen from 1X; AUTO is frozen during the balancing wizard so that V0 and V1 pass through the same path.
  • Rotor-wait mode: the reference is kept while the motor is stopped and the weight is fitted.
  • Spike discrimination: saturation is judged on the filtered signal; the raw rail-sample count is shown on the DIAG screen (a hint of mechanical knocks/EMI).
  • Tachometer-referenced time-domain angle: FFT and time-domain markers agree on the polar display.
  • Spectrum and condition display: 4096-point FFT, time waveform, RMS/peak/crest and ISO 20816 zone colors.
  • DIAG screen: headroom percentage, gain/filter index, battery, speed stability.
  • Sensor calibration: without calibration the display marks estimated values as “ISO~”; once a calibration table is entered, it shows true units.
  • Simulation mode: training and demos without a sensor.
  • TargetRoadmap: synchronous averaging, envelope analysis + bearing fault frequency calculator (BPFO/BPFI/BSF/FTF), order tracking, Bode/Nyquist run-up/coast-down, cepstrum, ISO 1940 balance quality grade, split weights, job archive, Turkish interface, on-screen keyboard.

Variants

Variants
Model codeContentsSensorStatusRequest information
VB-1Device (7" touchscreen, analog front end, battery), tachometer inputSensor sold separatelyIn field testingRequest information: VB-1
VB-1-KTargetVB-1 + electrodynamic vibration velocity sensor + optical tachometer + carrying caseElmes electrodynamic velocity sensorPlannedRequest information: VB-1-K
VB-1-IEPETargetVB-1 + IEPE adapter module (for industrial accelerometers)100 mV/g IEPEPlanned (requires a separate front-end module)Request information: VB-1-IEPE
VB-2Two channels / two planes—Not planned (single-plane device)Request information: VB-2

Specifications

Measurement
Vibration input1 channel, passive velocity / piezo voltage sensor, AC-coupled, 47 kΩ input; no IEPE supply
Speed measurementRPM from the tachometer; speed check at the end of each window (> 2 % deviation is rejected)
Speed rangeField-tested at 673–1500 rpm
BalancingSingle-plane influence-coefficient method; result in grams @ degrees
Vibration velocitymm/s RMS; today raw counts + analytical mm/s estimate (assuming 4.0 mV/(mm/s))
Unit selectorm/s², g, mm/s, milTarget
Analysis band0–3.4 kHz (54.878 kHz / 8 decimation → 6.86 kHz sampling)
ISO band limiting10–1000 HzTarget
Amplitude error (signal processing)≤ 0.025 % (Hanning + Grandke + scallop correction; with synthetic signals)
Absolute accuracy±5 % (depends on sensor calibration)Target
Phase error≤ 0.043° on the FFT side (with synthetic signals); time-domain indicator 1.406°/bin
FFT resolution4096 points, 1.675 Hz/bin, 0.597 s window
ADC12-bit, 54.878 kHz, ×8 decimation, 32768 samples per window
Sampling streamSingle buffer (field version)
Gapless samplingDouble bufferingTarget
Inputs / outputs
Gain4 steps (×2.87 / ×3.51 / ×5.32 / ×10.6) + AUTO
Anti-alias filter4 steps (1 / 10 / 22 / 47 nF) + AUTO
Tachometer1 optical sensor input, timer capture
Display7" touchscreen
PC connectionUSB-CDC log
Data exportCSVTarget
Power
Supply7.2 V battery input; LM2576 → 5 V → 3.3 V; battery measured by the ADC (×11 divider)
Battery runtime≥ 6 hoursTarget
Mechanical & environmental
EnclosureHandheld enclosure, IP54Target
Operating temperature0…+50 °CTarget
Warranty & service
Warranty2 yearsTarget
ServiceAnkara, Türkiye

05 · Solutions

OEM Device Control

Ready-made control electronics, thermal process controllers and smartphone control for machine and device manufacturers.

Solution

Elmes OEM Device Control Platform

Your device's electronics are ready — you focus on the machine.

The problem. A machine builder making foggers, ovens, laboratory cabinets or chillers is an expert in mechanics and process; for electronics it either uses an off-the-shelf PLC/HMI (expensive, does not fit in the device, high unit cost) or a one-off contract design (built from scratch on every project: bootloader, HMI, alarms, logging, production test, CE). On the second route, know-how gets scattered, there is no version management, field updates need a technician, and consumables revenue cannot be protected.

The solution. The platform builds the OEM device's entire electronics stack from ready-made blocks: a mainboard (I/O, power stages, HMI port, module slot), a firmware framework (recipes/programs, multi-step process, PID, alarms/logging, user levels, operating hours, bootloader + Wi-Fi/USB OTA), HMI (DWIN/Nextion for a fast solution, DiscOS for advanced interfaces), modules (RFID consumable validation and usage counter, load-cell weighing, RF/phone remote control), fleet software (device inventory, firmware rollout, logs) and a production/compliance package (QC checklist, test fixture, CE technical file template). Only the device-specific layer is customized for each OEM.

Off-the-shelf PLC + HMIOne-off contract designElmes OEM Platform
Unit costHighLowLow
Development timeShort (limited)LongMedium (customization)
OTA / fleet managementRareNoneYes
Consumable validation (RFID)NoneWritten per projectModule
CE file / production testPLC certified, device separateEvery projectTemplate + service
Intellectual propertyOutside the OEMVariesOEM/Elmes by contract

Features

  • RFID consumable validation: consumable lock-in and recurring revenue for the OEM; usage counter written to the tag; operation refused on a type mismatch.
  • Weighing / consumption tracking: consumable usage, empty warning and dosing verification via load cell; shared infrastructure with the level telemetry of Wireless Well & Reservoir Control.
  • Multiple command sources: HMI, RF handheld remote and phone share the same safety logic; priorities and interlocks live on the mainboard.
  • Field updates: Wi-Fi/USB bootloader, version and serial-number tracking, rollout from the fleet software.
  • Application packages: fogging (time/dose program, consumables), ovens (profile PID, door — Elmes Thermal Process Controller), laboratory cabinets (airflow/alarms, TSE specification analysis), chillers (temperature/compressor protection, Nextion).
  • Production and compliance package: production QC checklist and test fixture; application support through Certification & Compliance Readiness Support.
  • TargetCE technical file template: a platform-wide template derived from the field-proven application package.
  • TargetNew mainboard: built around an STM32G0-based Elmes Module Series module; 8 digital inputs, 8 relays, 2 SSR/PWM, 4 analog inputs, 2 analog outputs and a hardware emergency-stop path.
  • TargetRecipe library and multilingual HMI: device programs managed from a library, user levels and a multilingual interface.
  • TargetCloud telemetry: OPC-UA/MQTT link to Telemetry & Process Intelligence; network-independent access through the cellular module (EM-G0C).
  • TargetDiscOS HMI and shared SDK: a DiscOS-based touch interface; a common development toolchain through the Module Programming/Test Fixture + SDK.

Specifications

Architecture
MCU (fielded projects)dsPIC33EP512MU810 (TFT mainboard), STM32F070 (oven), PIC16F1789 (first version)
MCU (new platform)STM32G0 — EM-G0N / EM-G0W / EM-G0LW modules (Elmes Module Series)Target
HMI optionsDWIN T5L 4.3" / 7" (Thermal Process Controller), Nextion (chiller), custom TFT (dsPIC33)
HMI option (new)DiscOS (STM32F7)Target
Inputs / outputs
Digital I/O8× opto-isolated DI 24 V, 8× relay 5 A (NO/NC), 2× SSR/PWM driver, 1× emergency-stop input (hardware path)Target
Analog I/O4× AI (4–20 mA / 0–10 V; thermocouple via MCP9600 or PT100 as an option), 2× AO 0–10 V / 4–20 mATarget
Measurement
Load-cell inputHX711 daughterboard
Load-cell input (new mainboard)1× 24-bit bridge input on the mainboardTarget
WeighingHX711, calibration, consumption tracking
Interfaces
CommunicationHMI UART, USB service port, module slot (Wi-Fi / LoRa / cellular)
RS485Modbus RTUTarget
Wi-FiESP-WROOM-02 (fielded application)
Wi-Fi (new platform)EM-G0W module / ESP32Target
RFID readerRC522 / SL031 (MIFARE) / NTAG daughterboard
RFID (new mainboard)RFID module in the module slotTarget
RFID consumable validationTag type and remaining quantity, counter write-back, rejection of counterfeit consumables
RF remote433 MHz RF handheld remote (fielded application)
RF remote (new)Wireless Crane Control family transmitters and receiversTarget
Phone remoteSmartphone Machine Remote Control (ESP32 captive portal + safety relay board)
Software
Program / recipeMulti-step programs (4×5 on the Thermal Process Controller)
Recipe management (new)Recipe library, user levelsTarget
PID / dose controlPID + dead-time compensation + power ceiling (in field testing on the Thermal Process Controller); dose/time control (fogging application)
Alarms / loggingError codes + HMI alarm page
Event logPersistent event log, CSV/JSON exportTarget
Operating hours / countersPersistent in flash/NVS; in use on the Thermal Process Controller and the Phone Remote
Bootloader / OTAdsPIC bootloader + remote loading over ESP Wi-Fi (about 90 devices in the field)
Bootloader / OTA (new)CRC verification + rollback (DiscOS approach), Wi-Fi/USBTarget
Performance & fail-safe
Safety functionsWatchdog, emergency shutdown, latching on sensor failure (Thermal Process Controller); control interlocks (Phone Remote)
Power
Supply24 VDC (9–36 V), separate supply for relays/SSRs, reverse-polarity and TVS protectionTarget
Licensing & support
Commercial modelPlatform boards, modules and firmware framework are ready-made; the device-specific part is customized under NRE, with a per-unit board/licence fee in series production
Intellectual propertyDefined by contract; the platform core stays with Elmes, the device-specific application layer can be transferred to the OEM
Customization timeApprox. 8–16 weeks depending on scope
SolutionComing soon

Elmes Thermal Process Controller (sintering, drying, heat treatment)

A furnace controller that runs programmed temperature profiles safely and resumes where it left off.

The problem. Makers of sintering, drying and heat-treatment furnaces mostly combine an off-the-shelf PID controller, a separate program unit and separate door/safety logic. The interface is fragmented, profile programming is hard, a power cut restarts the program from the beginning, and for heaters such as MoSi₂ that have low resistance when cold, transformer current protection is handled outside the controller. In zirconia sintering, a deviation of a few degrees at the 1530 °C hold step directly affects product quality.

The solution. The Elmes Thermal Process Controller brings temperature measurement (MCP9600, type S thermocouple, 18-bit), PID + dead-time compensation, step programs (5 steps, 4 programs; t3 user-adjustable in one of them), a power ceiling (transformer protection at low temperature), output ramping, door lock, fan relay, run-hour counter and a 7" touch HMI together on one board. After a STOP or a blown fuse, START positions the profile at the right step and time based on the furnace temperature (“resume where it left off”). Application-specific protections, such as a forbidden output band (80–84 %) against transformer resonance seen in the field, are added as parameters.

Platform advantage. The same software framework (programs/recipes, alarms, logging, PID, HMI) is shared with the other applications on the OEM Device Control Platform; for drying or heat treatment, only the sensor type, output stage and profile scheme change.

Off-the-shelf PID + separate program unitPLC + HMIElmes Thermal Process Controller
Profile programLimited, separate deviceProject-specific software5 steps × 4 programs, curve on the HMI
Dead-time compensation / power ceilingNone / externalMust be programmedBuilt in, parameterized
Resume where it left offNoMust be programmedBuilt in
Door lock / cool-down logicExternal relayMust be programmedBuilt in
Cost (OEM series)MediumHighLow to medium
CustomizationNoneIn every projectParameters/HMI through NRE

Features

  • Power ceiling (transformer protection): MoSi₂ heaters have low resistance when cold; the output is limited according to the temperature band.
  • Dead-time compensation: a 30 s look-ahead from a 16 s trend offsets filter lag.
  • Forbidden output band: the power band where transformer resonance was observed (80–84 %) is skipped with hysteresis.
  • Resume where it left off: after a STOP or blown fuse, the right step and time in the profile are found from the furnace temperature.
  • Door safety: the lock engages at START; the door opens only below the set safety temperature; the lift-door variant (TP-S-L) adds a motor drive and a two-stage START.
  • Run-hour and program counter: service/warranty tracking on the HMI settings page.
  • Simulation mode (debug): end-to-end program testing on the bench with a qualitative furnace model, including fault injection.
  • Parameter-based customization: PID, ceiling, ramp, cut-off, izone, TMAX and runaway thresholds are set from the console and saved.
  • TargetExpansion: multi-zone control, PT100/type K inputs, Modbus RTU, Wi-Fi monitoring, program library (recipes) and process logging.

Variants

Variants
Model codeApplicationSensorOutputDoorStatusRequest information
TP-SSintering (1530–1700 °C, MoSi₂ heater)Type S thermocouple (type B planned)0–10 V → SSR, transformer current protectionElectric lockIn field testingRequest information: TP-S
TP-S-LSintering, lift doorType S0–10 V SSRLift motor + lockExisting variant; moving to the new platformRequest information: TP-S-L
TP-DTargetDrying (≤ 300 °C)Type K / PT100Relay or SSR, fanOptionalPlannedRequest information: TP-D
TP-HTargetHeat treatment (≤ 1200 °C)Type K / NSSR, multi-zoneOptionalPlannedRequest information: TP-H
HMIDisplay options: 7" DWIN T5L 800×480 (current); 4.3" DWIN or DiscOS———4.3" and DiscOS options plannedRequest information: HMI

Specifications

Measurement
Temperature inputMCP9600, type S thermocouple, 18-bit, I²C; digital filter (EMA, ~41 s)
Measurement range−50…1850 °C valid range; TMAX default 1650 °C
Inputs / outputs
Heater outputPWM ≈ 9.8 kHz → ULN → 0–10 V → SSR; 0–100 %
Relay outputsDoor lock, fan
Extended outputs4 relays + 2 SSR driversTarget
Digital inputsDoor status
Extended inputs4 DI (door, emergency stop, thermal overload)Target
Software
Programs4 programs × 5 steps; sample profile: t1 30 min 0→300 °C, t2 60 min →1000 °C, t3 variable →1530 °C, t4 120 min hold, t5 120 min →700 °C; in program 3, t3 is user-adjustable (1–720 min)
ControlPID (default Kp 0.05 / Ki 0.0005 / Kd 1.5) + dead-time compensation + power ceiling + 2 %/s ramp + cut-off + 80–84 % forbidden band
ResumePositions the profile from the furnace temperature (PV)
AlarmsSensor fault, over-temperature, runaway; HMI error page
LoggingCSV telemetry on the USB console (debug); 10-hour curve on the HMI
Process logPersistent process log + USB/Wi-Fi exportTarget
Run-hour counterRUN minutes + completed program count; flash ping-pong storage, ~85,000-hour life
Performance & fail-safe
Hold stability (simulation)1528.6–1530.0 °C; overshoot ≤ 6.4 °C (τ 1200–2400 s)
SafetyIWDG ~4 s, EmergencyOff, configuration range validation, configuration version migration (v1→v3)
Door-open safety temperature150–700 °C, adjustable
Architecture
MCUSTM32F070CB, 48 MHz
New platform boardOEM Device Control Platform board (STM32G0)Target
Interfaces
HMI7" DWIN T5L touchscreen, 800×480
Service interfaceUSB-CDC console (debug build), SWD
Firmware updateVia SWD; no OTA
OTAWi-Fi/USB updates through the platform bootloaderTarget
Power
Board supply5 V / 3.3 V
OEM supply input24 VDCTarget
Warranty & service
Warranty2 yearsTarget
ServiceAnkara, Türkiye
SolutionComing soon

Smartphone Machine Remote Control

Put the remote in your pocket: run the machine from your phone, safely and wirelessly.

The problem. On fogging and spraying equipment, non-crane machines and vehicle-mounted equipment, the operator wants to stay away from the machine (chemicals, noise, visibility). Classic RF remotes are limited by channel count, one-way and have no display; they get lost, their batteries run out, and every machine needs its own transmitter. The mobile-app approach brings app-store processes, phone-model and cloud dependencies; above all, if the safety logic is left to the phone, the machine can keep running when the connection drops.

The solution. An ESP32 control unit is fitted to the machine; it opens its own access point (and can also join the existing plant network) and serves the interface to the phone as a captive-portal page. The interface talks to the unit over WebSocket; the unit passes the relay mask to the STM32 safety relay board over a 115200-baud UART. Momentary commands such as direction and start are active only while a finger is on the screen and fall back to a safe state through three separate timeouts (phone 800 ms, connection, daughterboard 500 ms). Start works only with the ignition on, for at most 5 s and once per ignition cycle; opposite directions are never energized together; the chemical pump runs only with the ignition on. Operating hours and the serial number are stored in the unit.

RF handheld remoteCloud mobile appElmes Phone Remote
Extra hardware for the operatorTransmitter (battery, risk of loss)NoneNone (phone)
FeedbackLEDYesYes (status, operating hours, badges)
Internet requiredNoYesNo (local AP)
Fail-safe logicIn the receiverIn the cloud/phoneIn the unit + safety board (dual timeout)
CustomizationChannels/labelsApp updateProfile file + APK

Features

  • Three-layer fail-safe: phone heartbeat (800 ms), WebSocket disconnect, daughterboard frame timeout (500 ms).
  • Single-shot start and ignition interlock: protects the engine; the chemical pump cannot run without the ignition on.
  • Joystick head direction: single or dual axis, two relays on the diagonals.
  • Machine profiles: the same unit switches between machine models (valves, stages) from the settings page; all outputs turn off on a profile change.
  • Operating hours and serial number: for service and warranty tracking, persistent in NVS.
  • Demo mode: the interface runs in a browser without the ESP32, from a local file or with a demo parameter; for sales demos and training.
  • AP+STA: joins the plant network; access without switching the phone's Wi-Fi network.
  • TargetSession security: app PIN, single-active-controller lock, session timeout and a forced password change at first setup.
  • TargetWi-Fi OTA and event log: wireless firmware updates and a persistent event log.
  • TargetExternal antenna and 16 relays: an external antenna for wider coverage; a 16-relay safety board for valve and stage outputs.

Variants

Variants
Model codeContentsRelaysInterfaceStatusRequest information
TK-8ESP32 control unit + 8-relay STM32 safety board8Captive-portal web + Android APKPrototype (MVP)Request information: TK-8
TK-16Target16-relay safety board (valve/stage outputs)16Same as TK-8Planned (16-bit mask ready on the ESP side)Request information: TK-16
TK-MTargetESP32 module only (the OEM connects it to its own mainboard over UART)—Same as TK-8Planned; integrated into the OEM platform mainboardRequest information: TK-M
TK-APKTargetBranded Android app (OEM logo, machine profiles)—APKPlanned (demo APK available)Request information: TK-APK

Specifications

Radio
Wi-FiSoftAP + captive portal (192.168.4.1); option to join the plant network (AP+STA), .local name via mDNS; single radio: the AP channel follows the STA channel
Range≥ 30 m around the machine (Wi-Fi, open field)Target
Architecture
MCUSTM32 (F070 family) on the safety relay board; ESP32 in the control unit
Unit-to-board linkUART 115200 baud: Serial2 (GPIO17/16) on the dev board; UART0 ↔ STM32 USART1 on the mainboard
Interfaces
User interfaceSingle-file HTML embedded in the unit, no external dependencies; WebSocket v1.1
IndicatorGPIO2 LED (client connection status)
Inputs / outputs
Relay outputs8 relays
Relay outputs (extended)16-relay board; 16-bit mask already in the protocolTarget
Contact rating10 A / 250 VACTarget
Performance & fail-safe
Daughterboard timeoutMomentary relays are released if no valid frame arrives within 500 ms
InterlocksOpposite-direction interlock; start ≤ 5 s + 3 s cool-down, single shot; chemical pump only with ignition on; phone heartbeat 800 ms
Communication & security
AuthenticationWi-Fi WPA2 password (default password on the label)
Session securityForced password change at first setup, app PIN, single active session, session timeoutTarget
Software
Machine profileButton set, relay map, single/dual-axis joystick
Persistent dataNVS: machine profile, serial number (1–20 characters), operating hours (counted while the ignition is on)
Firmware loadingLoading over USB/UART
OTAWi-Fi OTATarget
LoggingSerial log (115200 baud); operating hours
Event logPersistent event logTarget

06 · Solutions

Automation & Telemetry

A telemetry layer that collects, monitors and turns field data into decisions; a retrofit kit that connects legacy machines without dismantling them.

SoftwareComing soon

Telemetry & Process Intelligence

Field data into semantic memory, semantic memory into decisions.

The problem. Water utilities, irrigation associations and factories either invest heavily in wired SCADA to monitor geographically scattered wells, reservoirs, pumps and machines, or do not monitor them at all. Existing Elmes wireless installations show data on a local panel; data is not collected centrally, and historical analysis and alarm notifications are limited. Maintenance happens after failures; non-revenue water in Turkish networks averages ~32 % (2023), and municipalities are required to bring it down to ≤ 25 % by 2028.

The solution. The platform is designed as three modules:

  • Monitoring subscription: the Wireless Gateway / RTU collects data from RF nodes in the field (Wireless Well & Reservoir Control, Wireless Analog & Digital Data Transmitter, Wireless Digital I/O Link, Wireless Meter Reading Node) and from Modbus/MQTT/OPC-UA sources, and forwards it to the cloud (or an on-prem server). The web dashboard shows live values, trends, alarms (SMS, email, WR-001 alarm remote) and weekly reports; alert thresholds are user-defined. Hardware, connectivity and dashboard come in one subscription.
  • Predictive maintenance: time-series anomaly detection, asset health scores and maintenance work-order suggestions on the same data. The first pilot uses process variables (flow, pressure, temperature, level, current); for vibration, VibroBal measurements and later a wireless vibration node are added.
  • Water-loss (NRW) package: water balance per DMA (district metered area) from the inlet meter, reservoir level and pressure; minimum night flow analysis, leak alerts and reporting. Outcome-based (water savings) subscription.

Semantic memory. Atlas (GraphRAG + vector) makes past events queryable in context, and decision support dashboards generate daily routes for operations teams. This layer will be rolled out together with the predictive maintenance module.

Features

  • Multi-protocol field data: data collection from Modbus, MQTT and OPC-UA sources.
  • Web dashboard and alerts: field data monitored on a web dashboard, with alert generation.
  • Licence-free RF backbone: SIM cost per gateway, not per node.
  • TargetTime-series anomaly detection: the core of the predictive maintenance module.
  • TargetPredictive maintenance model: based on process variables and VibroBal vibration data.
  • TargetAtlas semantic memory integration: contextual queries over the event history.
  • TargetAuto route and task generation: a daily route for the maintenance team.
  • TargetWeekly executive briefing.
  • TargetOne subscription: nodes, gateway and dashboard; hardware, connectivity and software together.
  • TargetNRW water balance: DMA-based night flow analysis.
  • TargetLocal-logic RTU: local thresholds and alarms on the gateway when the internet is down (Wireless Gateway / RTU).
  • TargetEdge-AI anomaly detection: anomaly pre-screening on the gateway (long term).

Specifications

Deployment
Deployment modelCloud (Türkiye) subscription; on-prem optionTarget
ServerContainer package; at least 4 vCPU / 8 GB RAM for on-premTarget
UpdatesVersioned containers; gateway firmware OTA (Gateway/RTU and Module Series SDK)Target
BrowserCurrent desktop and mobile browsersTarget
Field hardwareWireless Gateway / RTU (Ethernet / Wi-Fi / 4G); RF nodes: Well & Reservoir Control, Analog & Digital Data Transmitter, Digital I/O Link, Meter Reading NodeTarget
Architecture
MemoryAtlas GraphRAG + vector
Technology stackMQTT broker + Node/TypeScript services + PostgreSQL/TimescaleDB; PostgreSQL pattern shared with Elmes DM and AI WorkspaceTarget
Data modelTenant → site → device → channel (tag); time series, alarms, events, assets, DMA (district)Target
Integrations
Data sourcesModbus RTU/TCP, MQTT, OPC-UA
OutputWeb dashboard + alerts
Export / APIREST API, CSV/Excel export, webhooks, OPC-UA serverTarget
NotificationsSMS, email, push, WR-001 alarm remoteTarget
Other Elmes productsAI Workspace (Atlas), VibroBal measurement import, IIoT Retrofit KitTarget
Security & data
AuthenticationEmail/password + 2FA; SSOTarget
AuthorizationTenant admin / operator / viewer; site-level scopeTarget
Data location and transportServers in Türkiye; on-prem option; TLS; gateway-to-cloud device identity (certificate/token)Target
Data retentionRaw data 1 year / aggregated data 5 yearsTarget
Licensing & support
Licensing modelMonitoring: monthly/annual subscription per device or site; predictive maintenance: per-asset subscription; water loss: outcome-based (water savings)Target
Support and SLA8×5 support (monitoring); 24×7 alarm channel option; 99.5 % availabilityTarget
Field serviceInstallation, commissioning and maintenance serviceTarget
Roadmap
Stage 1 — MonitoringGateway connection, dashboard, alarms, reports; 1 pilot siteTarget
Stage 2 — Predictive maintenanceAnomaly detection on process variables; VibroBal vibration data; Atlas memoryTarget
Stage 3 — Water lossNRW module; water utility pilotTarget
Stage 4 — Decision supportRoute/task generation, weekly briefing, Edge-AI RTU (Gateway/RTU, EM-S7L-433)Target
HardwareComing soon

IIoT Retrofit Kit

Connect legacy machines to data without tearing them apart: wireless node, gateway, dashboard.

The problem. In cement, sugar, food and metal plants, 15–30-year-old machines (mills, presses, furnaces, compressors, pump sets) are the backbone of production yet invisible: run/stop status, counters, temperature, pressure and current are either unavailable or kept in the operator's logbook. Modern machine-connectivity solutions require a PLC replacement, cabling infrastructure and an IT project; old machines have no PLC or a closed one, and pulling cable means production stops and trenching.

The solution. The kit picks up the machine's existing signals (running/stopped contact, fault contact, 4–20 mA/0–10 V sensors, counter pulses, current transformers) with wireless nodes mounted inside the control panel; the nodes reach the gateway across the plant over 433 MHz LoRa (≥ 300 m indoors targeted, extendable with a repeater). The Wireless Gateway / RTU passes the data to the existing SCADA over Modbus TCP and/or to the Telemetry & Process Intelligence dashboard over MQTT: operating hours, OEE inputs (downtime duration/count, production counter), trends and threshold alarms (SMS/email notification planned). Installation takes hours per node; the machine is not stopped.

PLC replacement / new automationWired I/O + industrial EthernetBattery LoRaWAN sensorsElmes Retrofit Kit
Production downtimeDaysHours–days (cabling)NoneNone / minutes
Cabling / trenchingYesYesNoNo
Uses existing signals (contacts, 4–20 mA)YesYesLimited (sensor replaced)Yes
Outputs (relays)YesYesNoYes (Digital I/O Link relay end)
PowerMainsMainsBattery (replacement)Panel 24 VDC (no battery)
Cost (relative)HighMedium–highLow–mediumLow–medium

Features

  • Kits sized by point count: S/M/L; quoted from your point list, with mixed node types.
  • Parallel connection principle: signals are tapped in parallel from existing contacts and sensor lines, with no intervention in the machine circuit; isolated inputs.
  • OEE inputs out of the box: downtime analysis from running/stopped + counter + fault contact (Telemetry & Process Intelligence).
  • Output option: remote start/stop or warning signals through the same node's relays (outside the machine safety circuit).
  • Modbus if you have SCADA, a dashboard if you don't: same gateway.
  • Battery-free: powered from the panel; no battery replacement rounds.
  • TargetRepeater: a single hop for a remote panel or building.
  • TargetMotor load monitoring: via current transformers.
  • TargetPredictive maintenance: a vibration node (VibroBal and Smart Motion & Environmental Sensors data) feeding the predictive maintenance module of Telemetry & Process Intelligence.
  • Target4G connectivity: for plants without a network.

Kit sizes

Kit sizes
KitPointsCommissioning (approx.)Request information
RK-STarget12½ dayRequest information: RK-S
RK-MTarget32 (+4)1 dayRequest information: RK-M
RK-LTarget64 (+8)2 daysRequest information: RK-L

Specifications

Radio
Band / channels433 MHz ISM, 8 channels, LoRa; the whole kit on the same network ID (NetID)Target
Radio moduleEM-G0L-433 in the nodes, EM-G0LW-433 in the gateway; current generation MODM0 (STM32F070 + SX1268)
Range
Indoors≥ 300 m node → gateway; ×2 with a repeaterTarget
Open field≥ 2000 mTarget
Performance & fail-safe
Nodes per gateway≥ 100Target
Data updatePolling interval 10 s – 10 min, adjustable; events (contact changes) sent immediatelyTarget
Event latency< 2 s contact change → dashboard (single hop)Target
Communication lossA node is flagged offline after 3 polling intervals without a reply; adjustable fail-safe timeout on relay outputs
Inputs / outputs
Kit point countRK-S 12 / RK-M 32 (+4) / RK-L 64 (+8)Target
Digital (per node)8× opto-isolated DI 12–24 V + 8× relay 5 A
Analog (per node)4× 4–20 mA / 0–10 V, 16-bit
Pulse (per node)4× S0/reed, ≤ 10 kHz
Interfaces
Upstream connectionModbus TCP/RTU, MQTT (via the gateway)
Power
Node supply9–36 VDC panel supply, no battery
Gateway supply9–36 VDC or USB
Deployment
Site requirementsDIN-rail space in the panel (node 6 modules wide), 24 VDC, antenna feed-through outside the panel (pigtail)
Installation time (approx.)Node 1–2 hours (inside the panel, from existing terminals), gateway 1–2 hours; commissioning RK-S ½ day, RK-M 1 day, RK-L 2 days

07 · Solutions

HMI & Embedded Platform

An embedded operating system for touch devices and a browser-based HMI design editor.

SoftwareComing soon

DiscOS — Embedded HMI Operating System

A ready-made OS for your touchscreen device: bootloader, updates, app model and a shell that machines can talk to.

The problem. An OEM developing a touchscreen device rewrites the same infrastructure on every project alongside the HMI framework (TouchGFX/LVGL): bootloader and safe updates, settings persistence, logging, Wi-Fi provisioning, file system, a production/test shell. This layer is the invisible half of the product; its bugs show up in the field as "bricked" devices, corrupted settings and unreachable logs. Off-the-shelf HMI panels (DWIN/Nextion) are cheap, but the application logic stays on a separate MCU, and updates and integration become fragmented.

The solution. DiscOS delivers this layer as a product: a dual-image flash map (USB-free, headless bootloader + application), staging over QSPI with CRC32-verified installation, hybrid self-confirm with RTC backup + boot-meta and automatic rollback; display/touch/network/system tasks on FreeRTOS; two-tier settings (core + per-app KV); littlefs; a framed binary protocol with the ESP-01 co-processor, captive-portal Wi-Fi provisioning and a telnet shell; a power policy (dim/off when idle). The App_t application model (enter/tick/touch/exit) and the function-table app_host_t enable loadable .dap packages. The OEM writes only its own application.

Positioning. DiscOS is not a competitor to TouchGFX/LVGL but the "OS" layer beneath and around them. Today it ships with its own lightweight GUI toolkit (no TouchGFX/LVGL); a GUI library option is planned.

Bare HAL + HMI libraryOff-the-shelf HMI panel (DWIN/Nextion) + separate MCULinux (Yocto/Buildroot)DiscOS
Bootloader / safe OTAWritten per projectPanel and MCU separateYes (complex)Yes, CRC + rollback
Boot timemss5–20 sms (target < 1 s)
App model / loadable appsNoneNoneYesYes (.dap)
Machine shell / test automationNoneNoneSSHAI-first shell, 3 transports
Cost (BOM)LowLowHighLow (STM32F7 + ESP-01)
File system / loggingWritten per projectNoneYeslittlefs, log ring + live stream

Features

  • AI-first shell: a machine-parsable grammar, identical on all three transports; agents and CI scripts run self-tests, screenshots, updates, file transfers and app installs through the host tool (device_cli) (bench: self-test 20/20, 25/25 including crash scenarios); log marks give test flows a deterministic anchor.
  • Loadable apps (.dap): the same source builds as a built-in app or as a package, the only difference being the added load base; busy rules ensure safe replacement.
  • Update discipline: "the OS downloads, the bootloader installs"; USB-free, headless bootloader; IWDG refresh per block; interruption, resume and rollback drills.
  • Hardware truth in one file: the board profile (board.yaml) is the single source of truth; documents carry no pin copies, and a profile checker enforces consistency.
  • Power and display policy: CPU-free PWM dimming, UI freeze/resume; the shell and screenshots keep working with the display off.
  • Rail monitor: 3V3 rail droops are tracked with ADC VREFINT + analog watchdog; RF power-ladder measurement.
  • Lock screen: SHA-256 + salt; a UI gate, not a security boundary.
  • TargetElmes HMI board: an STM32F7/H7-based OEM board with 7" and 4.3" displays.
  • TargetSigned images: update images verified by signature.
  • TargetGUI library option: LVGL integration.
  • TargetPackage repository, multiple languages and OEM branding: an app store/package repository, a multilingual interface and OEM-specific branding.

Packages

Packages
Model codeContentsHardwareStatusRequest information
DOS-F769-DKDevelopment kit: DiscOS image + ESP-01 Wi-Fi + SDK + host toolsSTM32F769I-DISCO (MB1225) + ESP-01 (CN2)Prototype (single reference board)Request information: DOS-F769-DK
DOS-SDKApplication SDK (app_sdk.h, template, .dap packager, device_cli) + documentation—Available for internal use; external package plannedRequest information: DOS-SDK
DOS-OEMTargetOEM HMI licence: image + bootloader + OTA infrastructure, Elmes HMI boardElmes HMI board (STM32F7/H7, 7" / 4.3")PlannedRequest information: DOS-OEM
DOS-APP-*TargetApplication packages (e.g. VibroBal measurement, oven HMI)—PlannedRequest information: DOS-APP-*

Specifications

Architecture
MCU / reference boardSTM32F769 (Cortex-M7, 216 MHz, 2 MB flash, SDRAM) — STM32F769I-DISCO (MB1225)
Product boardElmes HMI board (STM32F7/H7)Target
Layersapps → ui / os → drivers → bsp; HAL only in the bsp layer; layer rules enforced at build time
Language / APIC; app_sdk.h umbrella header; App_t (on_enter / on_tick / on_touch / on_exit); APP_API_VERSION 1; app_host_t with 63 entries (append-only)
Boot time< 1 sTarget
Interfaces
Display800×480 DSI command mode, LTDC + DMA2D, touch; backlight PWM (TIM8 → DMA → GPIO, 1 % steps)
Wi-FiESP-01 (ESP8266, 1 MB) on UART5, custom firmware 1.2.0-RAIL; TX power 10 dBm by default (rail-droop policy); measured up to 20 dBm with droop ≤ ~20 mV (bench)
ESP protocolFramed binary protocol (0xA5 · VER · TYPE · LEN · PAYLOAD · CRC16); captive-portal provisioning; telnet bridge; ESP OTA
Shell transportsUSART1 VCP, USB-CDC (8 KB ring buffer with NAK back-pressure), Wi-Fi telnet — byte-identical grammar
Software
Shell58 commands; ok / err + error code and key=value responses; machine-readable command inventory (help --machine); --yes confirmation for dangerous commands; live log streaming; PNG screenshots
Application package (.dap)64 B header + PIC image + u32 fixup list, CRC; stored under /apps/; 256 KB SDRAM arena, one loaded package at a time; installation over wired transports only
Settings storeCore struct (magic + checksum + 2 s debounce) + 4 KB TLV/KV per app
File systemlittlefs v2.11.3 (unmodified), memory-mapped read-only window, atomic file writes; ~7.5 KB/s write, ~4.7–4.9 KB/s read over VCP (bench)
Deployment
StorageQSPI MX25L512 (64 MB): staging area + 32 MB littlefs partition; internal flash: 64 KB boot, 1.44 MB application, boot-meta and settings sectors
Update pathsVCP (ST-LINK) ~7.5 KB/s; USB-CDC ~169 KB/s (window 32); Wi-Fi (update from URL)
End-to-end update time1.44 MB application slot: USB-CDC 14.6 s; VCP 31.3 s; Wi-Fi 37.2 s (bench)
Security & data
Image integrityHardware CRC32 (zlib-compatible), rollback to the last-known-good image, hybrid self-confirm; no image signing
Image signingSigned imagesTarget
Licensing & support
Licensing modelFree for internal and partner use; OEM licence as NRE + per-device feeTarget
Roadmap
Next stepsElmes HMI board, signed images, LVGL option, app package repository, multiple languages, OEM brandingTarget
SoftwareComing soon

Elmes HMI Editor

Draw HMI screens in the browser, bind them to variables, simulate without the device.

The problem. OEM device makers usually design screens in vendor-specific desktop tools (DWIN DGUS, Nextion Editor, TouchGFX Designer). Each tool needs its own installation, learning curve and file format. The designer and the firmware engineer do not see the same screen, and every change has to be loaded onto the device for customer approval. Variable–component bindings (temperature > 50 → red) are usually hand-coded in firmware.

The solution. HMI Editor is a three-panel web editor: a component library on the left, a React Flow-based canvas in the middle, page and property panels on the right. The designer opens multiple pages, drags rectangle/text/button/image components, snaps them to a grid, manages layer order and edits properties (position, size, border, corner radius, color) in the panel. Global variables (tags) are defined and bound to component properties; in the planned simulation mode, changing a variable's value will show how the interface reacts without the device.

Project file. Projects are saved and reloaded as JSON; customer approval happens through a single shared link. The goal is to generate DWIN/DiscOS target code or asset packages from the same JSON, closing the gap between design and firmware.

Features

  • Screen area frame: the real display size (e.g. 800×480 DWIN 7") is shown on the canvas as a non-selectable, non-draggable background; components are placed relative to it.
  • Multiple pages: each page has its own screen size, background and border.
  • Tag (variable) binding: component properties bind to global variables.
  • Layer context menu: right-click to bring to front / send to back / move one step forward or back.
  • Resizable panels: left/right panel widths are adjusted with a drag handle.
  • Copy/paste and keyboard shortcuts.
  • Plain JSON project file: versionable with Git; easy to pass between teams by email.
  • TargetConditional styling: styles driven by variable values (Sicaklik > 50 → red).
  • TargetSimulation mode: Play/Stop to see the interface react without the device.
  • TargetAdvanced components: gauge, chart and input field.
  • TargetExport: DWIN DGUS, DiscOS and web HMI targets.
  • TargetCloud project repository and multilingual text tables.
  • TargetComponent template library: ready-made components in the Elmes corporate style.

Specifications

Deployment
Deployment modelCloud (editor.elmes.io)
On-prem installationInstallation package for OEMsTarget
ServerLinux VPS, Nginx reverse proxy + Let's Encrypt TLS; the beta is served from a development server
Production deploymentProduction buildTarget
UpdatesPull from Git and restart
CI/CDAutomated build and release pipelineTarget
BrowserCurrent Chrome / Edge / Firefox (desktop); mobile browsers are not supported
ClientNo server-side logic; all processing happens in the browser
Development environmentNode.js 20, npm, Vite
Architecture
Technology stackVite + React + TypeScript, @xyflow/react (React Flow), Zustand, MUI (dark theme), Emotion
Data modelProject → pages (id, name, settings: width/height/background/border; nodes; edges) + tag list; plain JSON
Component typesRectangle, text, image, button
Additional component typesCircle, line, polygon, gauge, input field, chartTarget
Integrations
ExportJSON
Export targetsDWIN DGUS asset/page package, DiscOS screen definition, web HMI bundleTarget
ImportJSON (the editor's own project file)
Image importJPG / PNG / SVGTarget
APINone
Project APIREST project API in the cloud layerTarget
Security & data
Project dataThe project file stays on the user's computer; no data is kept on the server
Transport securityTLS 1.2+
Cloud data (KVKK)Data hosted on servers in TürkiyeTarget
AuthenticationNone (open beta server)
AccountsUser accounts and project ownershipTarget
AuthorizationOwner / editor / viewerTarget
Licensing & support
Licensing statusInternal tool for now; the beta is free
Licensing modelFree tier + PRO subscription + OEM/on-prem licenceTarget
Source licenceNot decided yet; third-party components are MIT-licensed (React, Vite, Zustand, React Flow, MUI)
SupportNo support during the beta
Support levelEmail, response within 2 business daysTarget
BackupThe user's own JSON file
Cloud backupDaily backup in the cloudTarget
Roadmap
Stages 1–2Core editor, multiple pages, resizing, layers, MUI — completed
Stage 3Tag system, component–variable binding — partly completed
Stage 4 (completed)Save / open
Stage 4 (planned)Simulation mode; button actions (change page, write variable, script)Target
Later stagesAdvanced components, export targets, cloud accounts, production buildTarget

08 · Solutions

AI & Software

The AI Workspace platform, AI-assisted PCB design and agent-driven software operations.

SoftwareComing soon

AI Workspace Platform

Multi-model assistant profiles, knowledge graph and federated search in one platform.

The problem. In a mid-sized industrial or engineering organization, knowledge is scattered across three places: documents (specifications, drawings, manuals), chat and email history, and field data (SCADA, telemetry). Teams use different AI tools on personal accounts; data leaks out, costs stay invisible, and no one can audit which role accesses which model with what data. When the question is "did pump X have a similar fault last year, and what did we do?", the answer lives only in people's memory.

The solution. AI Workspace provides a single workspace inside the organization. A separate AI assistant profile is defined for each team and role, with independent model, permissions and context. The Atlas knowledge graph stores company data at the semantic level using a GraphRAG architecture; it extracts entities and relationships from documents and is queried in natural language. Federated search scans Atlas, documents and conversation history in a single query, with keyword, semantic and graph layers working together. A plugin architecture connects workflows (bid preparation, fault-report summarization, specification analysis) as modules. RBAC and usage/cost tracking give management visibility.

Knowledge joined with field data. Elmes's distinctive approach is to connect field telemetry to Atlas as well: with events from Telemetry & Process Intelligence, "fault history + maintenance document + live measurement" come together in a single query. This connection is on the development roadmap; the platform is currently in closed early access.

Features

  • Multi-model assistant profiles: model, permissions and context are defined separately for each team and role.
  • Atlas knowledge graph — GraphRAG-based: extracts entities and relationships from documents; queried in natural language.
  • Federated search: Atlas, documents and conversation history in a single query across keyword, semantic and graph layers.
  • Plugin architecture: workflows such as bid preparation, fault-report summarization and specification analysis are added as modules.
  • RBAC + usage tracking: role-based access; usage and cost are tracked per role.
  • On-prem or cloud deployment: with an on-prem installation, data stays entirely inside the company.
  • TargetField-data bridge: events from Telemetry & Process Intelligence and data from the Wireless Gateway / RTU are written to Atlas semantically.
  • TargetModel mix: a local open-source model for confidential data and a proprietary API for general questions, governed by profile policy.
  • TargetAnswers with citations: every answer carries a reference to its source document or graph node.
  • TargetAudit log: all queries and tool calls are logged.

Specifications

Deployment
Deployment modelOn-prem / cloud
Installation packageDocker / Kubernetes packageTarget
On-prem serverLinux; GPU for local modelsTarget
Cloud hostingData center in TürkiyeTarget
UpdatesVersioned container images with database migrationsTarget
ClientCurrent desktop and mobile browsersTarget
Server resourcesEstimate: core 4 vCPU / 16 GB RAM; GPU with ≥ 24 GB VRAM for a local LLMTarget
Architecture
Software stackTypeScript/Node services, PostgreSQL (pgvector) and a graph database; same PostgreSQL/MCP approach as Elmes DMTarget
Data modelTenant → workspace → profile; documents, chunks and embeddings; Atlas entities and relationships; conversations; audit; usage eventsTarget
Search tiersKeyword + semantic + graph
Integrations
ModelsOpen-source (local) + proprietary APIs
Provider abstractionCommon provider layer for switching between models (the pattern used in AutoPCB)Target
PluginsMCP tool serversTarget
Data sourcesFile upload in the first release; file system, SharePoint and email connectors; Telemetry & Process Intelligence APITarget
APIREST API and SDKTarget
Security & data
AuthenticationSSO (OIDC / LDAP)Target
AuthorizationRole-based access control (RBAC) + usage tracking
Data residency (on-prem)Data stays entirely on customer infrastructure
Data residency (cloud)In TürkiyeTarget
Proprietary model useCan be disabled per profileTarget
Audit logAll queries and tool calls are loggedTarget
Licensing & support
PricingOn quotation
License modelPer-user monthly subscription + on-prem installation feeTarget
Support (early access)Directly with the product team
Support (general availability)8×5, response within 1 business dayTarget
Roadmap
Stage 1Internal pilot on Elmes's own document archiveTarget
Stage 2Core platform, assistant profiles and document search (cloud)Target
Stage 3Atlas GraphRAG, federated search, RBAC and usage trackingTarget
Stage 4Plugins/MCP, Telemetry & Process Intelligence connector, on-prem packageTarget
SoftwareComing soon

AutoPCB

From natural-language requirements to a Gerber package: schematic, placement, autorouting and DRC in one browser.

The problem. In a small electronics team, board design passes through three separate tools and two separate skill sets: the requirements document, the schematic tool (KiCad/Altium), then layout and Gerber output. Recurring blocks (USB-C + LDO + MCU module + LED) are redrawn in every project; library parts are entered by hand from datasheets; team members cannot edit the same file at the same time. DRC errors are caught late, only when the manufacturing files are generated.

The solution. AutoPCB takes requirements in three ways: natural language in Turkish or English ("temperature logger with USB-C charging, an 18650 cell, an OLED display and BLE"), a wizard or a template. An LLM turns this into a structured requirements model; a topology solver synthesizes a draft schematic from known blocks (power supply, MCU module, USB, sensor), and the LLM refines and blends it where needed. In the Konva-based schematic editor the user adds parts and draws wires; the BOM is grouped by part number and exported to CSV.

Board and manufacturing. In the PCB tab, the board outline and footprints are placed (a connectivity-weighted auto-placer), and a Dijkstra-based two-layer autorouter routes the board, inserting vias where needed. ERC (union of AI and drawn netlists, differential-pair rules, BOM↔schematic cross-check) and DRC (clearance, vias, board edge, severity grading) run on the design. The manufacturing tab delivers RS-274X Gerber, an Excellon drill file and a JLCPCB-format pick-and-place CSV in a single ZIP. With Yjs CRDT the team edits the same project concurrently, backed by an offline IndexedDB cache. Component drafts are extracted from datasheet PDFs (including vision-LLM OCR for scanned documents); versioned parts are published and voted on in the community library.

Features

  • Three-way requirement capture: natural language (TR/EN), wizard or template; requirements imported from PDF.
  • Topology synthesis + LLM blending: known blocks (USB-C, LDO, RP2040/STM32G0/ESP32/ATmega/PIC MCU modules, LoRa, I2S audio) are resolved in priority order; the LLM only refines, and the deterministic core is preserved.
  • Placement hints: per-part placement hints and fixed positions; 0R fanout stubs.
  • DRC-aware router: via and track placement costs reflect DRC bands; escape from fine-pitch pads with a "mouth-via" rule.
  • Severity-graded DRC: geometrically unavoidable no-net pad violations are suppressed.
  • Concurrent teamwork: schematic, PCB and BOM are edited simultaneously with Yjs CRDT; offline changes are kept in an IndexedDB cache and merged when the connection returns.
  • Immutable component versioning: older designs keep the older part version; a published or used version cannot be deleted.
  • Community library: part publishing, voting, a "used in N projects" indicator and version history.
  • Datasheet → part: component drafts from the PDF text layer, with vision-LLM OCR for scanned documents.
  • Manufacturing package: RS-274X Gerber, Excellon drill file, JLCPCB-format pick-and-place CSV and BOM CSV in a single ZIP.
  • Deterministic testing: AI calls are recorded and replayed; every release passes a test gate that verifies byte-identical results on the reference designs.

Specifications

Deployment
Deployment modelSelf-hosted; backend and frontend services on Node.js ≥ 18
PackagingDocker image and cloud SaaS editionTarget
DatabaseSQLite (better-sqlite3), single file
Multi-tenant databasePostgreSQLTarget
UpdatesGit + npm
CI/CDAutomated build and deployment pipelineTarget
BrowserCurrent Chrome / Edge / Firefox on desktop; WebGL/Canvas
Server resourcesNode.js ≥ 18, ~1 vCPU / 1 GB RAM (estimate); no extra build tools needed for OCR
AI provider keyMinimax or Anthropic API key; mock provider for operation without external calls
Architecture
Software stackTypeScript monorepo (shared / backend / frontend); Express; Vite + React + Tailwind + react-konva; Yjs CRDT; ESM
Data modelProject: requirements, schematic (sheets, nets), BOM, PCB (outline, footprints, tracks, vias); immutable component version rows; audit log
AutorouterDijkstra, 2 layers, 0.5 mm grid, via insertion, soft costs reflecting DRC bands, post-route via nudging
DRC / ERCDRC: clearance, via diameter/drill, board edge, no-net pad suppression; ERC: 19 rules + differential pairs + BOM↔schematic cross-check
Manufacturing outputGerber RS-274X, Excellon, pick-and-place CSV (JLCPCB format), BOM CSV
Test gate74/74 unit tests, 67/67 Playwright UI tests; fast smoke test (10 probes), collaboration test and byte-identity verification
Integrations
REST APIEndpoints for auth, projects, components (search, versions, publishing, votes, usage), AI (requirement parsing, topology suggestion, synthesis/refine/blend over SSE), export (Gerber, BOM CSV), autorouting, footprint placement, ERC and DRC
Real timeYjs WebSocket rooms (schematic, PCB, BOM, library) and user presence
AI providersMinimax M3 (default; multimodal OCR), Anthropic (claude-sonnet-4-6), mock, replay
ImportPDF datasheets
Additional formatsKiCad / Eagle import; STEP / 3D exportTarget
Security & data
AuthenticationEmail/password + JWT; optional authentication for public read access
AuthorizationProject ownership; author and voting rules for community parts (no voting on your own part)
Enterprise identity and accessRBAC roles and SSOTarget
Data residencyOn the customer's server when self-hosted; LLM calls send requirement text and datasheet images to the selected provider (can be avoided with the mock provider or a local model)
Privacy and transportKVKK privacy notice and data processing agreement; TLS via reverse proxyTarget
Licensing & support
Source licenseTo be finalized before releaseTarget
Commercial modelSelf-hosted (free / internal use), team subscription (per user per month), enterprise licenseTarget
SupportEmail, response within 2 business daysTarget
Roadmap
CompletedMVP: AI schematic synthesis, autorouter, ERC/DRC, concurrent editing (CRDT), part extraction from PDF/OCR, community library
Next3D viewer, KiCad/Eagle import, ground pour, 4 layers, PostgreSQL, Docker, pricing plans, direct upload to manufacturer DFM checksTarget
SoftwareComing soon

Elmes DM

Manage your agents' work, memory and acceptance gates in one place — records, not files.

The problem. In a team building software with LLM agents, three things fall apart: (1) work tracking — which task belongs to which spec, and have the acceptance criteria been met; (2) agent memory — every repository carries its own agent instruction files and notes, and cross-project knowledge (technology lessons, rules) is copied around and goes stale; (3) agent configuration — bootstrap files, agent definitions and skills are updated by hand in every repository. The "Review → Done" transition depends on human memory, and no token or cost telemetry is collected.

The solution. Elmes DM combines four functions in a single PostgreSQL-based system: hierarchical work tracking (the DM_Item model: project → epic → item → sub-item; ltree taxonomy), a central agent memory store (module → project → technology node → global scope; promotion to a higher scope requires approval), the Environment Registry (agent files are generated from the Registry with dm env sync; knowledge is injected, never written to disk) and a spec/AC-gated workflow engine (acceptance criteria in a separate table; moving from Review to Done requires all acceptance criteria to be satisfied and no open blockers).

Agents and interface. Agents connect over MCP: remote SSE, a local stdio binary or the CLI, all derived from the same Zod contract, with policy enforced on the server. The web UI shows work in Tree-Table and swimlane Board views with Pane Stack, hovercards and an Inspector; drop targets are derived from the state machine. Partition-ready telemetry events and a model price table provide the groundwork for cost tracking.

Features

  • Files are build output: agent configuration files (.claude) are generated from the Registry; knowledge (briefs, instructions) is injected, never written to disk.
  • Scoped memory + approved promotion: module → project → technology → global; agents cannot write directly to the technology or global scope.
  • Atomic AC gate: acceptance criteria live in a separate table; the status transition is validated in a single transaction.
  • State machine as data: Board drop targets are derived from the state machine, with no hard-coded list; dragging writes only the status and leaves the lane value unchanged.
  • MCP connectivity: remote SSE, a local stdio binary and the CLI all derive from the same Zod contract; policy is enforced on the server.
  • RLS leak test: runs in every test run and catches incorrect role usage.
  • Transport parity test: SSE and stdio responses are bit-identical.
  • Taxonomy alias resolution with a rejection log.
  • Partition-ready telemetry: an event table keyed on (id, ts); cost calculation through a model price table.
  • Web UI: Pane Stack, hovercards, Inspector and URL state; Tree-Table with accordions; Board with swimlanes.

Specifications

Deployment
Deployment modelSelf-hosted: docker-compose (PostgreSQL 17, loopback only) + web application
Production deploymentDocker image / compose production profile; cloud optionTarget
DatabasePostgreSQL 17 only (ltree, JSONB, full-text search); no SQLite option
Vector searchHybrid search with pgvectorTarget
Job queuepg-boss (no Redis/BullMQ required)
UpdatesDatabase migrations with Drizzle (pnpm db:migrate)
CI/CDAutomated build and deployment pipelineTarget
ServerNode.js (ESM, TypeScript strict), pnpm, Docker; ~2 vCPU / 2 GB RAM (estimate)
ClientCurrent desktop browser (UI); Claude Code or an MCP-compatible agent client
Architecture
Software stackpnpm monorepo: db / contract / domain / server / mcp-local / cli packages + React web app
Data modelDM_Item hierarchy (self-referencing parent), acceptance-criteria table, scoped memory (module → project → technology → global), Environment Registry, telemetry events, model prices, ltree taxonomy + aliases
WorkflowState machines as data; guard registry on the server; Review → Done requires all acceptance criteria satisfied and no open blockers (project policy, on by default)
Test gateCore test suite against a real PostgreSQL: RLS cross-project leakage, AC gate, SSE/stdio transport parity, taxonomy aliases, approved promotion — all green
Integrations
MCPRemote SSE and local stdio binary; bit-identical contract
HTTP / WebSocketHTTP API + WebSocket (live UI updates)
CLIdm env sync / verify, dm pending / approve / reject, dm token
Agent clientsClaude Code (.claude files generated from the Registry)
Other MCP clientsCompatibility validationTarget
Security & data
AuthenticationToken (dm token)
Single sign-onSSO / OIDCTarget
AuthorizationProject scoping with PostgreSQL RLS; separate application and service roles; approved promotion
Data residencyOn the customer's server when self-hosted; the system itself makes no LLM calls (the agent runs on the client side)
SecretsEnvironment files are never committed to the repository
KVKK documentsTogether with the cloud editionTarget
Licensing & support
Source licenseNot yet determined
Commercial modelSelf-hosted license / team subscription / hosted editionTarget
SupportEmail, response within 2 business daysTarget
Roadmap
CompletedCore system and core test suite; the first three stages of the web UI (Pane Stack, Tree-Table, Board)
NextWorkspace view (dockview), pgvector hybrid search, graph layer, production deployment and managed PostgreSQL evaluation, full taxonomy tree, telemetry/cost dashboardTarget

09 · Services

Services

Contract product development, custom RF adaptation, industrial software, compliance preparation, SCADA, HMI design and AI integration — from a single engineering team.

Service

Contract Electronic Product Development (ODM/OEM)

From idea to series production — hardware, software, testing, documentation.

The problem in the field. A machine builder's core business is mechanics and process; the electronic control board comes from outside. Typical problems: the board designer doesn't write firmware, the firmware developer doesn't build the HMI, and nobody thinks about production testing; the move to series production brings the "it worked on the prototype" problem; the CE file is remembered at the last minute; two years later components can't be sourced and the designer can't be reached. The electronics are redone from scratch for every new device, and the same mistakes are repeated.

The Elmes solution. Discovery produces a requirements document and an architecture choice: for most devices the Elmes OEM Device Control Platform (main board + firmware framework + HMI) plus the modules needed (RFID consumable verification, weighing, RF/phone control, Wi-Fi); for wireless needs, the Elmes Module Series. Only the application package and the mechanical fit are customer-specific. The prototype is tested in our workshop and on the customer's machine, then revised with the findings from field testing. Production files (Gerber, BOM, assembly, test procedure, fixture) are prepared; the pilot batch passes Elmes testing; the CE technical file is prepared in parallel through Certification & Compliance Readiness Support. After production, field updates via bootloader/OTA and EOL tracking continue.

The result. The manufacturer receives the device electronics as a "product": documented, tested, updatable and backed by spares. The IP arrangement is clear in the contract: the customer-specific application belongs to the customer, the platform stays with Elmes, and the usage license is perpetual.

CriterionFreelance designerAssembly/EMS companyElmes
Schematic/PCBYesNo (customer supplies)Yes
Embedded software + HMIMostly noNoYes (platform framework, HMI design)
Wireless / phone controlRareNoYes (module series, phone control)
Production test and fixtureRareYes (customer-defined)Yes (with product knowledge)
CE technical fileNoNoPreparation and management
Post-production firmware/EOL supportUnclearNoUnder SLA

Features

  • Platform-based start: with the Elmes OEM Device Control Platform, programs/recipes, alarms, logging, PID and bootloader/OTA are ready; the customer pays only for the application package.
  • Consumable verification (RFID/NTAG): cartridge/bottle recognition, counter and lock; a recurring-revenue model for the OEM.
  • Weighing / consumption tracking: HX711 load-cell sub-board; level and dosing applications.
  • Wireless and phone control: an RF remote family based on the Wireless Crane Control System, the ESP32-based Phone-Based Machine Remote Control; LoRa/Wi-Fi with the Elmes Module Series.
  • Field updates: bootloader + Wi-Fi/USB OTA; the fleet in the field is updated from a single point.
  • Production testing designed in: test points, programming/test fixture, production scripts; QC checklist and serial-number scheme.
  • CE-ready design: EMC/RED principles applied in the design; pre-compliance measurement and technical file (Certification & Compliance Readiness Support).
  • PC / fleet software: device configuration, log download, fleet monitoring (Industrial Software Development, Telemetry & Process Intelligence).
  • Reverse engineering and platform migration: redesign of legacy boards, PIC→STM32 migration.
  • AI-assisted design acceleration (internal use): schematic/layout groundwork with AutoPCB; customer deliverables are standard CAD files.

Service scope

Service scope
Scope
  • Requirements analysis and architecture
  • Schematic/PCB
  • Embedded software (bare-metal/FreeRTOS) and HMI
  • Wireless / phone control
  • PC/mobile software
  • Prototype and field testing
  • Production files, test fixture and procedure
  • Pilot batch
  • CE technical file preparation
  • Maintenance and updates
Out of scope
  • Mechanical/industrial design (coordinated with external suppliers)
  • Tooling and molds
  • Accredited lab test fees
  • Power electronics above 1 kW (assessed per project)
  • ATEX/Ex and medical device (MDR) certification (preparation support only)
  • The device's process/clinical performance (customer responsibility)
Process

Discovery → concept → prototype → field test → production → maintenance; six approval gates.

Typical duration
Indicative
  • Discovery: 1–3 weeks
  • Prototype: 6–16 weeks
  • Full project: 2–9 months
  • Platform adaptation: 4–12 weeks
  • Series production: 4–10 weeks per order (depending on supply)
Deliverables
  • Requirements document and architecture
  • Schematic and PCB design files (standard CAD)
  • Embedded software and HMI screens
  • Prototype and field-test findings
  • Production files (Gerber, BOM, assembly)
  • Test procedure, fixture and production scripts
  • QC checklist and serial-number scheme
  • Pilot batch
  • CE technical file (board level)
  • Bootloader/OTA field-update infrastructure
What we need from you
  • Device function and process description
  • Mechanical dimensions and enclosure constraints
  • Target market and compliance requirements (CE/UKCA, industry standard)
  • Target volume and cost range
  • Machine/device for testing and site access
  • Feedback within 1 week at approval gates
  • Component preferences, if any (brand, EOL policy)
Team & tools

Team: hardware engineer, embedded software engineer, HMI/UX designer, software developer, production/test.

Tools: Proteus, KiCad/Altium (per project), STM32CubeIDE, MPLAB X, ESP-IDF, FreeRTOS, AutoPCB (internal accelerator), oscilloscope, spectrum analyzer and RF measurement kit, programming/test fixture, contract assembly partner.

Pricing model
Indicative
  • Discovery: fixed fee
  • Development: NRE (fixed-scope milestone payments) or per man-day
  • Platform adaptation: NRE + per-unit board/license fee
  • Series production: unit price (BOM + assembly + test)
  • Maintenance: annual SLA
Warranty & maintenance

Firmware updates and EOL tracking are part of the maintenance package; a spare-board stock is optional.

Target warranty
Target
  • Design defects: 12 months of corrections from pilot-batch acceptance
  • Manufactured boards: 24-month warranty against manufacturing defects (limited by the component manufacturer's warranty)
Service

Custom Wireless Control Adaptation & Integration

We adapt our standard RF products to your site.

The problem in the field. A catalog remote rarely fits the machine exactly: the number of functions differs, one button is expected to give two speeds, the signal type the PLC expects (NO/NC, pulse/continuous, analog) doesn't match, steel structures and distance cut the range, and several systems on the same site interfere with each other. With imported products, the manufacturer won't make small changes and the supplier can't customize; the customer "makes do" with extra relays and timers inside the panel. The result: safety risk, maintenance confusion and an undocumented system.

The Elmes solution. A site survey produces the function list and the panel interface, and a range pre-test is carried out. Most needs are solved by configuration: channel/function map, pulse/continuous mode, interlocks, timeout and safe state, address/ID. Where needed, a custom variant is built: membrane/keypad layout, channel count, analog input (potentiometer, joystick, 4–20 mA), custom enclosure, PLC interface (relay, RS485/Modbus). Range is solved with antennas and repeaters; interference-free operation on the same site is ensured by an addressing plan. Installation, SAT and training come from Elmes; the wiring diagram and settings document are delivered.

The result. A wireless control/transfer system that fits the machine exactly, is documented and has service behind it; no temporary fixes are left inside the panel.

CriterionImported catalog remoteGeneral electronics shopElmes
Function/channel changesNone or limitedExtra relays in the panelAt firmware and keypad level
Analog / joystick / 4–20 mAIf a model existsDifficultYes (analog data transmitter base)
PLC interfaceRelayRelayRelay / RS485-Modbus / pulse
Range problemsUp to the vendorTrial and errorPre-test, antennas and repeaters
Documentation (diagram, settings)CatalogNonePer project
Service / spare partsImporter—Local, Ankara

Features

  • Channel/function map: button → output mapping, pulse/continuous, mutual interlock (forward/reverse), two-speed, E-Stop priority.
  • Analog and joystick transfer: potentiometer, joystick, 4–20 mA / 0–10 V; based on the Wireless Analog & Digital Data Transmitter, with analog outputs on the receiver.
  • PLC interface options: dry-contact relay, RS485/Modbus RTU.
  • Custom keypad/membrane and enclosure: customer logo/labels, IP65 enclosure, belt/neck strap, fixed-panel version.
  • Range solutions: antenna selection (omni/Yagi/J-pole, Industrial RF Antenna Series), height/placement, repeaters; verified with a site pre-test.
  • Multiple systems on one site: address/ID and channel plan; the number of systems that can run without interference is given in the relevant product's specifications.
  • Safe-state settings: communication-loss timeout and output behavior (drop/hold) are set per project.
  • Migration from legacy systems: compatible spare or additional devices for sites running existing 433 MHz systems.
  • Parallel operation with the existing wired control: receiver outputs can be wired in parallel with the existing button circuit; a diagram is provided.
  • TargetPulse counter input: an additional PLC interface option via an I/O carrier board.
  • TargetOverload protection (option): wireless load-cell module, shared with the Wireless Crane Control System.
  • TargetLoRa for long range: in the new series, LoRa communication based on the Elmes Module Series.

Service scope

Service scope
Scope
  • Site survey and range pre-test
  • Channel/function map and settings
  • Custom keypad/membrane, enclosure, labels
  • Custom firmware profile
  • PLC/panel interface (relay, RS485/Modbus, analog)
  • Antenna/repeater plan
  • Installation, SAT, training
  • Wiring diagram and settings document
Out of scope
Process

Site survey → adaptation → production/configuration → workshop test → installation → SAT/training → service.

Typical duration
Indicative
  • Total: 1–6 weeks
  • Survey: 1–3 days
  • Configuration: 1–2 weeks
  • Custom variant: 2–6 weeks
  • Installation: 1–5 days
Deliverables
  • Adapted transmitter and receiver (channel/function map, custom firmware profile)
  • Custom keypad/membrane, enclosure and labels where needed
  • Range pre-test results and antenna/repeater plan
  • Wiring diagram
  • Settings document
  • Installation, SAT and operator training
What we need from you
  • Machine/panel diagram and PLC I/O list
  • Function list (what each button does, interlocks, speeds)
  • Site access with an electrician on hand
  • Safety requirements (E-Stop, target PL)
  • Mounting location and power supply (AC/DC)
  • Information on other RF systems on site
Team & tools

Team: RF/embedded engineer, field technician.

Tools: RF channel/interference scanner, programming and serial-communication test tools, spectrum analyzer/SWR meter, antenna kit; keypad/membrane and enclosure supplier.

Pricing model
Indicative
  • Standard product price + fixed adaptation fee
  • Custom variant: NRE + per unit
  • Installation: per day + travel
  • Multiple sites: unit price per site
Warranty & maintenance

The product warranty remains valid for the adapted product (details on the relevant product page). Service and spare parts from Ankara; batteries are consumables.

Target warranty
Target
  • Adaptation workmanship: 12 months
  • Spare parts: 5 years
Service

Industrial Software Development (PC / Mobile / Web)

We write the software for your devices in the field, too.

The problem in the field. The device is ready, but configuration is done with "hex commands in a terminal program"; the service technician can't pull logs; multiple devices can't be monitored from one place; the customer asks for reports and the data is typed into Excel by hand. General software firms don't know serial ports, Modbus, timestamps or outage behavior; device makers don't employ software developers. The result: a lack of tools and a dependency that lower the device's value.

The Elmes solution. Discovery maps out the user roles (operator, service, manager), the data model and the protocol list, and the architecture is chosen (desktop/web/mobile, on-premises/cloud). If the device side is from Elmes, the protocol is designed together; if not, a driver is written from the protocol document and verified against a test device. The application layer covers configuration, calibration, logging, history, reporting, fleet view, users/permissions and firmware upload. Deployment: installer package, Docker/service, APK; release notes and maintenance.

The result. A device that can be sold as "it comes with software": service time drops, the fleet is monitored on one screen and data turns into reports. Source code and documentation are handed over to the customer as per the contract; a maintenance package keeps releases going.

CriterionGeneral software firmDevice maker's own teamElmes
Serial/Modbus/MQTT/device protocolsLearns themKnows themKnows them, wrote most of them
Development in step with firmwareNoYesYes (same team as hardware development)
Offline/outage toleranceAdded laterVariesDesign principle
Desktop + web + mobile + gatewayMostly one areaRareAll four
Long life / maintenanceEnds with the projectDepends on staffMaintenance package

Features

  • Device configuration tool pattern: parameter tree, calibration wizard, log download, firmware upload; the same skeleton is adapted to different devices.
  • Fleet/monitoring dashboard: device list, status, alarms, history, map; role-based access; the cloud side runs on Telemetry & Process Intelligence.
  • Offline-first design: local buffering, synchronization, outage indicator.
  • Protocol design: a common protocol framework with Elmes devices (serial/TCP framing, CRC, versioning); drivers for the customer's device.
  • Reporting: PDF/Excel, scheduled reports, per shift/day/month.
  • Multiple languages and themes: TR/EN plus customer languages; the Industrial HMI & UI/UX Design design system.
  • Captive portal / phone control: the device opens its own Wi-Fi network and the phone connects via a browser or app (the Phone-Based Machine Remote Control pattern).
  • Gateway services: data acquisition on Raspberry Pi/Linux, CSV/DB, MQTT publishing, remote access (the software layer of the Wireless Gateway / RTU).
  • Data analysis interfaces: FFT, trends, thresholds/alarms (experience from VibroBal and the balancing measurement system).
  • Long service life: pinned dependencies, LTS releases, installer packages; modernization of legacy .NET/WPF applications.

Service scope

Service scope
Scope
  • Discovery and technical design
  • Device protocol/driver
  • Desktop, web, mobile (Android), gateway/server service
  • Database and reporting
  • Users/permissions
  • Deployment package
  • Testing, manual, training
  • Maintenance
Out of scope
Process

Discovery → technical design → development (sprint deliveries every 2–3 weeks) → testing → deployment → training → maintenance.

Typical duration
Indicative
  • Discovery: 1–2 weeks
  • Device tool: 3–8 weeks
  • Desktop: 6–16 weeks
  • Web: 6–16 weeks
  • Mobile: 4–12 weeks
  • Gateway service: 2–8 weeks
Deliverables
  • Technical design document
  • Device protocol document and driver
  • Application: installer package, Docker service or Android APK
  • Database and report templates
  • Customer-specific source code (as per contract)
  • Third-party library license list
  • User manual and release notes
  • User training
What we need from you
  • Device and protocol documentation (if the device is yours) plus a test device
  • User roles and sample workflows
  • Existing data/report samples
  • Server/network access or cloud preference
  • Corporate identity
  • Feedback within 1 week in review rounds
  • Pilot users
Team & tools

Team: software engineer (.NET/Python/TypeScript), embedded engineer (protocols), UI/UX designer.

Tools: Visual Studio, VS Code, Qt Creator, Android Studio, PostgreSQL, Docker, Git; serial-port and protocol test tools; internal project management and AI-assisted development tools (internal use).

Pricing model
Indicative
  • Discovery: fixed fee
  • Development: fixed-scope milestone payments or per man-day (sprint-based)
  • Maintenance: annual (a percentage of the development fee, or fixed)
  • Hosting: monthly (on the Telemetry & Process Intelligence infrastructure)
Warranty & maintenance

Maintenance package: OS/library updates, minor features, backup checks. Critical operations get a separate SLA.

Response time
Indicative

Remote: 1–2 business days.

Target warranty
Target

Bug fixes: 6 months after delivery.

Service

Certification & Compliance Readiness Support

Design and technical files ready for the CE/RED route.

The problem in the field. The product is finished and the market wants CE; the manufacturer doesn't know which directives apply, which tests are needed or what the technical file must contain. On the first visit to the lab the product fails on EMC emissions or RF spurious emissions; every retest costs both time and money. The technical file is scattered, there is no risk assessment, the label is wrong and it's unclear who will sign the DoC. Wireless products add RED and the BTK notification on top; importers and resellers keep asking "is it certified?".

The Elmes solution. We start with an analysis: product definition, target market, the applicable directives and harmonized standards, test plan, gaps and a budget range. Pre-compliance measurements are made in our workshop: RF power/harmonics/spurious emissions, antenna matching, EMC pre-scan. Findings are fixed in the design (filtering, grounding, layout, firmware duty cycle) and measured again. The technical file is compiled: product definition, schematic/BOM, risk assessment, test plan/reports, manual, label and a DoC draft. An accredited lab is selected, samples and documents are prepared, tests are attended and findings are closed. For Turkey, the BTK notification is prepared.

The result. You go to the lab "ready"; the technical file is a single package; the manufacturer knows what they are signing. Certificates come from the lab or notified body and the declaration from the manufacturer; Elmes manages the process.

CriterionGoing straight to the labCertification consultantElmes
Applicable standards analysisPartly, in the lab quoteYesYes
Pre-compliance measurementNo (paid pre-test at the lab)Usually noYes (workshop equipment)
Fixing findings in the designLeft to the manufacturerGuidanceElmes fixes and re-measures
Technical file compilationLeft to the manufacturerYesYes (with design knowledge)
Issuing certificatesLab / notified bodyNoNo (preparation and management)

Features

  • RF pre-compliance measurement: output power (with ERP/EIRP calculation), harmonics and spurious emissions, band edge, SWR/antenna matching; compared against EN 300 220 limits.
  • EMC pre-scan: locating emission sources with a near-field probe and a spectrum analyzer.
  • Test-mode firmware: continuous carrier, modulated continuous transmission, channel selection, duty-cycle disable; mandatory for lab tests. On Elmes devices it comes ready with the SDK package.
  • Fixes by the designer: findings are closed in the schematic, layout and firmware, then re-measured.
  • Risk assessment support: a hazard list and mitigation table following the EN ISO 12100 / EN 61010 / EN 62368-1 approach, depending on product type.
  • BTK notification: band/power conformity for short-range devices and the application file, drawing on the experience from the Wireless RS485 Modem application.
  • EN 54 preparation: EN 54-25 requirements analysis for wireless fire components, building on the preparation work for the Wireless Fire Alarm System (Firesens).
  • TargetConducted emissions pre-test: in-house conducted-emission pre-measurement once the equipment is complete.
  • TargetTechnical file template: a standard folder structure and checklist.
  • TargetFast track for module users: once the Elmes Module Series has its RED certificate, a "radio module integration" file approach for products using the module; a full radio test may not be needed (to be confirmed with the lab).

Service scope

Service scope
Scope
  • Directive/standards analysis and test plan
  • Pre-compliance RF/EMC measurements (with workshop equipment)
  • Design fixes and verification
  • Technical file compilation and DoC draft
  • Labeling/marking
  • Lab selection and application file
  • Test attendance and closing findings
  • BTK notification
Out of scope
  • Issuing certificates
  • Accredited test fees
  • Modules requiring notified-body assessment (ATEX, MDR, SIL/PL certification; preparation only)
  • Local representation abroad (UKCA/FCC)
  • Product liability insurance
  • Signing the DoC (the manufacturer signs)
Process

Analysis and test plan → pre-compliance measurement → design fixes and re-measurement → technical file and DoC draft → lab selection and application → test attendance → closing findings and BTK notification → close-out with the manufacturer's signature.

Typical duration
Indicative
  • Analysis: 1–2 weeks
  • Pre-test: 1–2 weeks
  • Fixes: 2–6 weeks
  • Technical file: 2–4 weeks
  • Lab process: 4–12 weeks (depends on the lab's schedule)
  • BTK: 1–3 weeks
  • End to end: 2–6 months
Deliverables
  • Compliance analysis (directive/standards list, gaps, budget range)
  • Test plan
  • Pre-compliance measurement report
  • Records of fixes and verification measurements
  • Risk assessment
  • Technical file (single package)
  • DoC draft
  • Label/marking proposal
  • Lab application file and sample preparation
  • BTK notification file
What we need from you
  • Product samples (at least 2–3 units, final hardware and firmware)
  • Schematic/BOM/layout (if not designed by Elmes)
  • Draft user manual
  • Target market list
  • Manufacturer details for the DoC (legal entity, address, authorized signatory)
  • Payment of lab fees
  • Cooperation on test-mode firmware (if not designed by Elmes)
  • Decisions within 1 week
Team & tools

Team: RF/hardware engineer, embedded engineer (test-mode firmware), documentation lead.

Tools: spectrum analyzer, RF wattmeter, antenna analyzer, SWR meter, oscilloscope, RF channel/interference scanner; current standard texts; technical file template; list of accredited labs.

Pricing model
Indicative
  • Analysis: fixed fee
  • Pre-test and technical file: fixed fee (by product complexity)
  • Design fixes: per man-day or NRE under contract development
  • Lab process management: fixed fee + attendance days
  • Lab test fees: paid by the customer directly to the lab
Warranty & maintenance

The technical file is delivered complete and up to date; updates for new standard versions are quoted separately. A first-time pass at the lab is not guaranteed. The manufacturer is responsible for keeping the file for 10 years; Elmes keeps a copy under contract.

Target commitment
Target

If a product that passed our pre-test gets a lab finding, the fix man-days are discounted (as set in the contract).

Service

SCADA & Industrial Automation

From PLC and MCU to dashboard — one engineering team.

The problem in the field. In most plants, data lives in three places: inside the PLC, in the operator's notebook and at remote points where it is never collected (wells, tanks, pumping stations, valves). Running cable means digging and permits; each supplier is responsible only for its own part; when the PLC, HMI and reporting come from different companies, integration errors belong to no one. In older plants, machines without a PLC stay outside monitoring.

The Elmes solution. We start with a survey: the I/O list, the existing PLC/panel inventory, communication options and remote points are mapped. The architecture is built by a single team: a PLC or Elmes controller + SCADA/HMI at the center; wireless I/O (Wireless Well & Tank Control System, Wireless Analog & Digital Data Transmitter) and the Wireless Gateway / RTU at remote points; history, alarms, reports and, where needed, an ERP bridge on top. Wired and wireless field devices work side by side; wireless nodes go to a defined safe state on communication loss.

The result. One responsible party, one documentation set, one support line. Because the hardware is an Elmes product, firmware and spare-part access is faster when something fails in the field. The PLC program and SCADA project are handed over to the customer; no lock-in is created.

CriterionClassic integrator (PLC + off-the-shelf SCADA)Software-only houseElmes
Remote point connectivityCable / third-party radioOut of scopeOwn wireless I/O and gateway
Machines without a PLCExtra PLCOut of scopeEmbedded controller or IIoT retrofit kit
ResponsibilityHardware and software separateSoftware onlySingle responsible party
When a custom board is neededExternal supplierExternal supplierOwn design
Firmware/spare partsBrand-dependent—Local, Ankara

Features

  • Mixed wired + wireless field: PLC I/O and Elmes wireless nodes in one SCADA within the same project; the nodes appear as Modbus registers via the Wireless Gateway / RTU.
  • Monitoring for machines without a PLC: signal acquisition with the IIoT Retrofit Kit, without dismantling the existing machine.
  • Custom controller option: where a standard PLC is too costly or falls short, an embedded control board based on the Elmes OEM Device Control Platform (through contract development).
  • Communication protocols: integration over Modbus RTU/TCP, OPC-UA and MQTT.
  • Historian & reporting: shift/daily reports and alarm history.
  • User permission management: operator/maintenance/manager roles through the SCADA platform's role-based access control (RBAC).
  • Safe state on communication loss: wireless nodes go to a safe state after a defined timeout; the PLC keeps its local interlocks and SCADA raises an alarm.
  • TargetCloud monitoring layer: history and alarms monitored from the cloud with Telemetry & Process Intelligence.
  • TargetHot standby: redundant server architecture; a project option, not part of the standard delivery.
  • TargetAI predictive maintenance module: the second layer of Telemetry & Process Intelligence, using VibroBal data.

Service scope

Service scope
Scope
  • Survey and architecture
  • Panel/hardware design and procurement
  • PLC/controller programming
  • HMI/SCADA
  • Communication integration (Modbus RTU/TCP, OPC-UA, MQTT)
  • Wireless field I/O
  • FAT/SAT
  • Training
  • As-built documentation
Out of scope
  • Mechanical/civil works
  • High-voltage installation
  • Process guarantee (the customer owns the process)
  • Third-party license fees (SCADA/PLC software licenses as a separate line item)
  • Ongoing operator staffing
Process

Survey → design → panel/hardware → software → FAT → installation → SAT → training → maintenance.

Typical duration
Indicative
  • Survey: 1–2 weeks
  • Pilot: 4–10 weeks
  • Full project: 3–9 months
  • Expansion: 2–8 weeks
Deliverables
  • Survey report (I/O list, existing system inventory)
  • Architecture and panel drawings
  • Panel and field hardware
  • PLC/controller program
  • SCADA/HMI project
  • Communication and wireless node configuration (Modbus register list)
  • FAT and SAT records
  • Operator and maintenance training
  • As-built documentation package
What we need from you
  • Site access with an escort
  • Existing project files (PLC program, drawings, I/O list)
  • Process description and interlock conditions
  • Network/IT access (VPN, IP plan)
  • Acceptance criteria
  • Panel location and power supply
Team & tools

Team: automation engineer, embedded software engineer, software developer.

Tools: PLC vendor tools, SCADA platform (per project), Elmes RF test tools (channel/interference scanning, serial-communication testing), Modbus/MQTT test tools.

Pricing model
Indicative
  • Survey: fixed fee
  • Pilot/full project: fixed-scope quote (hardware and engineering as separate lines)
  • Expansions and changes: per man-day
  • Maintenance: annual subscription (by SLA level)
Warranty & maintenance
  • Elmes hardware: the respective product's warranty
  • Third-party hardware: the manufacturer's warranty
SLA
Indicative

Remote first-response and on-site intervention times are set by the maintenance package.

Target warranty
Target

Engineering workmanship: 12 months of bug fixes after commissioning.

Service

Industrial HMI & UI/UX Design

Meaningful for engineers, simple for operators.

The problem in the field. Industrial HMIs are often just the parameter list in the engineer's head dumped onto a screen: tiny buttons, a single page with 40 fields, colors that do not distinguish an alarm from a warning, and contrast that cannot be read in a dark workshop. Operator errors increase, training takes longer, and service calls start with "I didn't understand the screen". For a machine builder, the screen is also the brand; when a competitor's screen looks "better", it shows at trade fairs.

The Elmes approach. The field comes first: what the operator does, how often, and which mistakes they make. Then the information architecture: which information at which depth, the alarm hierarchy (warning / alarm / stop), shifts and user levels. Next comes the design system: large touch targets, color-coded states, dark / high-contrast mode, corporate theme. The prototype is tested with operators in Elmes HMI Editor and then implemented on the target platform. Communication with the controller (serial, Modbus, SPI) and the data model are set up by Elmes.

The result. Fewer operator errors, shorter training and a product family with one design language. If the manufacturer prefers, the panel comes ready as hardware + software (DiscOS or DWIN/TFT) and connects to their own board through communication only.

CriterionScreen made by the engineerGraphic design agencyElmes
Field reality (gloves, light, noise)Hit or missUnknownDefined through UX discovery
Hardware limits (memory, colors, touch type)KnownUnknownPart of the design from day one
Communication with the controllerYesNoYes (own board or customer board)
Theme / product family consistencyNoYesYes (theme system)
Prototype and operator testingNoStaticClickable (Elmes HMI Editor)

Features

  • Field UX research: operator observation, task analysis, error points.
  • Accessibility: large touch targets (for use with gloves), high contrast, legible fonts; custom pixel fonts generated for embedded screens.
  • Dark / high-contrast mode, plus ambient-light-based theming where the platform supports it.
  • Alarm hierarchy: color and sound coding for warning / alarm / stop; alarm list and history.
  • Theme system: corporate colors and logo from a single file; a consistent look across the product family.
  • Rapid prototyping: clickable screens in Elmes HMI Editor, shared in the browser.
  • Multi-shift use: user levels (operator / maintenance / manager), shift log.
  • Panel ↔ controller communication: serial, Modbus or SPI; the data model is set up by Elmes.
  • Multiple languages: via a text table; for embedded screens a font table is generated per language.
  • Hardware + software package: the manufacturer gets a ready panel based on a DWIN/TFT module or a DiscOS panel.
  • 3D / animated operator interface: optional; already applied in machine automation projects.
  • TargetDiscOS app package: panel software is updated over the air via Wi-Fi or USB as a .dap package (DiscOS).

Service scope

Service scope
Scope (included)

UX discovery, information architecture, design system/theme, prototype, operator testing, implementation on the target platform (DWIN T5L, Nextion, dsPIC/STM32 TFT, DiscOS, React/WPF/Qt), panel ↔ controller communication, multiple languages, user manual; optional supply of panel hardware

Scope (not included)

The process/control logic itself (covered by SCADA & Industrial Automation or Contract Electronics Product Development); brand identity design (logo etc.); mechanical panel cut-outs and enclosures (with Contract Electronics Product Development); third-party display module licenses

Process

Field discovery (operator observation, task analysis) → information architecture and alarm hierarchy → design system and theme → clickable prototype and operator testing → implementation on the target platform and controller communication

Typical duration
Indicative

Discovery 1–3 weeks; design + prototype 3–6 weeks; panel implementation 3–10 weeks; web/desktop application 4–12 weeks

Deliverables
Target

UX discovery report (task analysis, error points); information architecture and alarm hierarchy; design system and theme file; clickable prototype and operator test findings; screen implementation and source files for the target platform; panel ↔ controller communication protocol document; language tables; user manual

What we need from you

Site access and interviews with 2–3 operators; existing screens and the parameter list; controller communication documentation (if the customer's own board is used); corporate identity files; list of languages; feedback on review rounds within 1 week

Team / tools

UX/UI designer, embedded software engineer, web developer; Elmes HMI Editor, DWIN DGUS, Nextion Editor, STM32CubeIDE/TouchGFX, Qt 6, React/TypeScript; Elmes's in-house test tools (serial communication testing, embedded font generation, virtual keyboard)

Pricing model
Indicative

Discovery: fixed fee. Design + prototype: fixed fee based on the number of screens. Implementation: fixed scope or per person-day. Hardware package: per-panel unit price + implementation NRE. Maintenance: annual

Warranty
Target

Implementation defects: fixes for 6 months after delivery

Hardware and maintenance

Product warranty for panel hardware (DiscOS panel or the module manufacturer); version and language updates with the maintenance package

ServiceComing soon

AI Agent Development & Integration

Pipeline-based automation agents — human-approved, observable, scalable.

The problem in the field. Repetitive knowledge work (classifying support tickets, summarizing maintenance reports, procurement correspondence, data entry, generating code and documents) eats up people's time. General-purpose chatbots are not connected to company systems; what they do cannot be traced, nobody notices when they make mistakes, and the "AI pilot" never leaves the demo stage. Industrial settings add another problem: the data sits in SCADA, PLCs and devices, access and security rules are strict, and a wrong command has a physical cost.

The Elmes approach. First a scenario is chosen and the metrics are defined (time, accuracy, cost). The agent is designed as a pipeline: input → classification/extraction steps → tool calls (ERP, SCADA, CRM, documents and device data, via MCP or APIs) → human approval (mandatory for risky steps) → output. Every step is traced and written to an audit log. Quality is measured with a test set and regression runs; model and prompt changes are versioned. Deployment is on the customer's premises (on-prem) or in the cloud, and the model is chosen according to data classification (cloud API / local model). Risky actions (e.g. commands to a device) are either out of scope or require dual approval.

The result. Measurable, auditable agents with a clear scope — a system in operation, not a demo. Expansion is gradual: PoC → pilot → full integration.

CriterionGeneral chatbot / SaaSStandalone agent framework (DIY)Elmes pipeline agent
Connection to company systemsLimited / plug-insDeveloper's jobTool integrations (ERP, SCADA, CRM, devices)
TraceabilityNone / minimalMust be builtTrace + audit log as standard
Human approvalNoneMust be builtHITL gates by design
Industrial data (Modbus, MQTT, logs)NoneHardElmes's own SCADA, telemetry and gateway infrastructure
Quality measurementNoneVariesTest set + regression + versioning
Data residencyVendor cloudSelectableOn-prem / cloud / local model

Features

  • Structured pipelines: LLM steps inside a deterministic flow; schema-validated outputs; retries and error paths.
  • Tool-call integrations: MCP servers or API connectors; least privilege; separation of read and write access.
  • Human-in-the-loop (HITL): approval queue, corrections and feedback; mandatory for risky actions.
  • Observability: step-level traces, decision-level audit logs, cost counters; monitoring dashboard.
  • AutoDev development agents: work queue, acceptance-criteria gates, code/document generation and review following the Elmes DM pattern; in internal use at Elmes and offered as a separate package for customer projects.
  • Data residency options: cloud API / on-prem / local model; routing by data class.
  • Quality engineering: test sets, regression, prompt/policy versioning, A/B evaluation.
  • TargetAI Debate — multi-model discussion module: evaluating critical decisions from the perspective of several models.
  • TargetIndustrial data connectors: Telemetry & Process Intelligence and SCADA history, Modbus/MQTT through the Wireless Gateway / RTU, device logs; alarm summarization and shift report scenarios.
  • TargetKnowledge base (RAG): document search with source citations through AI Workspace.

Service scope

Service scope
Scope (included)

Scenario/metric definition, PoC, pipeline design, agent software, tool/MCP connectors (ERP, CRM, SCADA/telemetry, documents, email, device logs), HITL interface, trace/audit, test set, deployment (on-prem/cloud), training, operation and maintenance

Scope (not included)

LLM API/cloud usage fees and GPU hardware (customer account/budget); model training/fine-tuning (separate, per project); API development for the customer's own systems (coordination included); legal compliance opinions (referral provided); direct autonomous commands to physical systems (out of scope by default)

Process

Scenario selection and metric definition → PoC → pilot → full integration; gradual expansion

Typical duration
Indicative

Discovery/PoC 2–3 weeks; pilot 4–8 weeks; full integration 8–16 weeks; AutoDev pipeline 4–10 weeks

Deliverables
Target

Scenario and metrics document; PoC results report; pipeline design document; agent software and customer-specific source code; tool/MCP connectors; HITL approval interface; trace/audit dashboard; test set and regression report; deployment package and operations guide; prompt/policy files and open-source component list; training and handover documentation

What we need from you

A scenario owner (business unit) and an IT representative; a sample dataset (may be anonymized) and expected outputs; system API/access permissions (test environment); data classification and a residency decision (cloud/on-prem); pilot users and a feedback routine; an LLM account/budget

Team / tools

AI/software engineer, integration engineer (ERP/SCADA), UX designer (HITL interface); TypeScript/Node, Python, PostgreSQL, MCP, Docker; Elmes DM (work management), test/regression tooling; LLM provider APIs and a local model runtime

Pricing model
Indicative

Discovery/PoC: fixed fee. Pilot and full integration: fixed-scope milestone payments. Operation: monthly subscription (maintenance + quality monitoring); LLM usage costs are passed through to the customer transparently

Warranty
Target

Software defects: fixes for 6 months after delivery

Quality and maintenance

LLM output quality is tracked with measured metrics and a regression set; no specific accuracy is guaranteed, and the target metric is set in the contract. Regression testing and adaptation for model version changes are part of the maintenance package

ServiceComing soon

AI Integration Consulting

From process discovery to live pipeline — with engineering ownership.

The problem in the field. Management says "we should be using AI" — but nobody knows in which process, with which data or for what gain. Vendor demos are impressive but not connected to company data and systems. Pilots start without metrics, end with "not bad" and never reach production. Data privacy, KVKK and new AI regulation are unclear; IT does not want the cloud, while the business unit wants quick results. In an industrial company the data sits in SCADA and on paper, and AI teams do not know that world.

The Elmes approach. Discovery workshops produce a process and data inventory; scenarios are scored on impact, feasibility and risk; for each scenario an ROI model (person-hours, cost of errors, time) and a list of required data and access are written up. Infrastructure options (cloud API / on-prem / local model) are compared by data class and cost, and a compliance framework (KVKK, AI Act risk class, human oversight) is defined. The pilot is designed with metrics, run by the AI Agent Development & Integration team or the customer's own team, measured, and closed with a go/no-go decision. The scaling plan covers architecture, governance (permissions, monitoring, cost, model lifecycle), team and training, and handover.

The result. A measured pilot and a reasoned roadmap; a vendor-neutral infrastructure decision; a compliance framework; a sustainable in-house team. AI stops being a "project" and becomes a capability in operation.

CriterionManagement consultantAI product vendorElmes
Process / ROI analysisYesSales-drivenYes, validated by a pilot
Technical ownership (builds the pilot)NoWith its own productYes (with AI Agent Development), vendor-neutral
Industrial data (SCADA, PLC, devices)UnfamiliarRarelyOwn infrastructure (SCADA, telemetry, gateway)
Infrastructure neutralityYesNoYes (cloud / on-prem / local model)
Compliance framework (KVKK, AI Act)LegalLimitedTechnical framework + legal referral
Handover and in-house teamReportTraining (on the product)Training + governance + handover

Features

  • Process & data discovery: workshops, system review and sample data assessment; a data quality note.
  • Scenario scoring matrix: impact × feasibility × risk; out-of-scope actions (physical commands, decisions on personal data) are flagged from the start.
  • ROI modeling: person-hours, cost of errors, time, LLM/infrastructure cost; sensitivity analysis.
  • Infrastructure selection: cloud API / on-prem / local model; comparison of data residency, latency, cost and lock-in risk; recommendation for a multi-provider abstraction.
  • Pilot → production: a pilot with metrics, a go/no-go decision, governance and architecture.
  • Training & handover: separate modules for management, business units and IT/engineering.
  • Industrial focus: SCADA, telemetry and device-data scenarios; data access through the SCADA & Industrial Automation, Telemetry & Process Intelligence and Wireless Gateway / RTU infrastructure.
  • Compliance framework: KVKK data flows, AI Act risk class, human oversight and logging.
  • TargetAI Workspace setup & customization: installation of the AI Workspace platform and adaptation to the organization.
  • TargetAtlas knowledge graph data migration: moving company data into the Atlas knowledge graph of AI Workspace.
  • TargetTechnical documentation templates: ready-made document templates for the compliance framework.

Service scope

Service scope
Scope (included)

Process/data discovery, scenario scoring, ROI model, infrastructure and model selection, compliance framework, roadmap, pilot design, execution management and measurement, production rollout plan, governance, training, handover; optional AI Workspace setup (the platform is in closed early access)

Scope (not included)

Agent/software development (separately, through the AI Agent Development & Integration or Industrial Software Development services); LLM/cloud/GPU costs; legal opinions (referral and the technical framework are included); enterprise data warehouse projects (planning included, implementation separate); change management and HR processes (recommendations only); clinical decision support

Process

Discovery → Pilot → Scale

Typical duration
Indicative

Discovery 2–4 weeks; pilot 4–8 weeks; scaling 4–8 weeks; 4–16 weeks in total

Deliverables
Target

Process and data inventory; data quality note; scenario scoring matrix; per-scenario ROI model (with sensitivity analysis); list of required data and access; infrastructure comparison matrix and recommendation; compliance framework (KVKK data flows, AI Act risk class, human oversight); roadmap; pilot design and metrics document; pilot results report with go/no-go decision; scaling plan (architecture, governance); training modules and handover package

What we need from you

An executive sponsor; business unit and IT representatives (workshop attendance, about 4 hours a week); process documents and sample data (may be anonymized); system inventory and API information; cloud/data policy; users and budget for the pilot (LLM/infrastructure); decision turnaround within 1 week

Team / tools

Lead consultant (AI/systems engineer), integration engineer (ERP/SCADA), data analyst; workshop, scenario scoring and ROI model templates, infrastructure comparison matrix, compliance checklist; the AI Agent Development toolset for PoCs; Elmes DM (work management)

Pricing model
Indicative

Discovery: fixed fee. Pilot management: fixed fee (development quoted separately). Scaling: fixed fee or per person-day. Subscription: a monthly fixed-fee pool of consulting days. Training: per day

Acceptance and commitment

Deliverables are accepted against acceptance criteria (content and completeness); no guarantee of realized ROI is given, but validation through a pilot is committed. Continuity is provided through a subscription

Roadmap update
Target

Once within 6 months of delivery

Values marked “Target” are design targets, next-generation values or chip-vendor data; they are updated as measurement and certification are completed.

From RF to AI — end-to-end engineering.

İvedik OIZ, 1354. Cad. 1402. Sk. No: 6, 06370 Yenimahalle / Ankara, Türkiye · +90 (312) 395 85 86 · info@elmeselektronik.com