Built for batteries
A device asks for updates in one encrypted datagram of about 100 bytes, only when its radio is already on. No handshake, no idle connection.
You hold the keys
Releases are signed with your key and checked on the device. We deliver updates; we can't make your devices install anything.
Rollouts that stop themselves
Updates go out in waves. If failures pass your threshold the rollout halts, and devices roll back on their own.