MAH hazard zone access. Zero MSIHC findings in 18 months.
Specialty chemicals MAH unit, Vizag · Hyderabad-Vizag
A 1,800-worker specialty chemicals MAH-category plant in Vizag operates in a fully air-gapped infrastructure due to defence-adjacent supply chain commitments and the MSIHC hazardous chemical regime. Post-Zentry Sitewide+ On-Premise, every hazard zone entry is gated on a current induction certificate. Zero MSIHC findings in the last 18 months across three surprise inspections.
| ZONE 1 (MAH-A) | Induction current | 184 / 184 |
| ZONE 2 (MAH-B) | Induction current | 224 / 224 |
| ZONE 3 (FLAMMABLE) | Induction current | 92 / 92 |
| ZONE 4 (TOXIC) | Induction current | 48 / 48 |
| BLOCKED ENTRIES | Last 90 days | 12 (expired) |
| MSIHC LOG | Tamper-evident | Signed |
| AIR-GAPPED | Telemetry | 0 bytes |
What the plant was facing.
MAH-category chemical plants operate under intense MSIHC and Factories Act Section 41C scrutiny. Every contractor entering a designated hazard zone must hold a current, role-specific safety induction certificate. The plant's pre-Zentry process was a whiteboard induction at shift start, a paper sign-off retained at the security cabin, and no live link between the induction record and the actual zone entry. The exposure was real: any MSIHC inspector or factory inspector could ask for the contractor's current induction certificate at the point of zone entry. Without an answer, the plant faced findings, fines, and reputational damage.
The plant also had a hard constraint: the defence-adjacent supply chain commitment required a fully air-gapped infrastructure. No internet dependency for any operational system. Most platforms could not satisfy this constraint without compromising the audit chain. The plant needed a fully on-premise platform with no telemetry, no cloud sync, and a complete USB-or-LAN-only update path.
How Zentry was deployed.
Zentry Sitewide+ deployed on the On-Premise tier, fully air-gapped at the plant. No internet dependency, no telemetry. All data, all logs, all evidence stays at the plant. USB/LAN-only updates managed by the Care team during scheduled maintenance windows. The existing Matrix biometric and Honeywell ANPR hardware stayed in place. Induct kiosks were installed at every hazard zone entry, configured with the plant's MSIHC-specific role-based induction modules.
The Zentry modules in this deployment.
Pass™
Visitor management at the kiosk.
Explore Pass →Gate™
Access + contractor attendance, Forms XIII to XXIII.
Explore Gate →Drive™
Vehicle, parking, ANPR + GST e-Way Bill match.
Explore Drive →Induct™
3-minute safety induction at the kiosk.
Explore Induct →Learn™
Role-based industrial LMS + BRSR records.
Explore Learn →Worksheet™
Project P&L + gate-anchored hours.
Explore Worksheet →What Zentry Sitewide+ On-Premise produced for the plant:
Per-role MSIHC induction certificate validated at every hazard zone entry. Zone entry blocked if certificate expired or missing. Inspector can verify any zone entry back to the originating induction session.
DPDPA-compliant visitor management with explicit consent. Factory inspector and MSIHC officer check-in via kiosk.
CLRA Forms XIII to XXIII auto-generated. Per-agency.
Role-based safety training records. MSIHC-specific modules tracked per worker.
Hazardous material inbound and outbound tracking with e-Way Bill matching.
Every event signed and tamper-evident. Local-only. No telemetry. Defence-adjacent compliance posture preserved.
The metrics that moved.
What happened at the next audit.
Three surprise MSIHC inspections in 18 months. Zero findings on each. The plant's Section 41C posture moved from defensive to demonstrable. The defence-adjacent customer's annual supply chain audit closed with the auditor specifically noting the air-gapped audit chain as a model practice.
"We had two hard constraints: MSIHC requires per-zone induction certificates and our defence-adjacent customer requires fully air-gapped infrastructure. Every other platform asked us to compromise on one or the other. Zentry On-Premise gave us both. The kiosk induction, the gate verification, the audit chain, all of it lives at the plant. The MSIHC inspector saw the demonstration and said it was the cleanest hazard zone control she had reviewed."All case studies →
Request a reference call.
We can connect you with a Plant Head or EHS Head at a similar plant under NDA. Hear the story from the customer, not the salesperson.
Common questions on this deployment.
What does fully air-gapped On-Premise mean in practice?
No internet connection required for any operational function. The platform runs entirely on the plant's local infrastructure. Software updates are delivered via USB or LAN by the Care team during scheduled maintenance windows. No telemetry, no cloud sync, no external dependencies. Every byte of operational data stays at the plant.
How does the platform handle MSIHC hazard zone access at the point of entry?
At each hazard zone gate, the worker scans in (biometric or RFID). The platform looks up the worker's current induction certificate for that zone's MSIHC requirements. If the certificate is current and role-appropriate, zone access is granted. If it is expired, missing or role-inappropriate, access is blocked and the supervisor is alerted via the local console.
Is this a real customer or a composite?
Composite story drawn from real Zentry deployments at MAH-category specialty chemicals plants in the Visakhapatnam and Cuddalore chemical clusters. Industry, geography and metrics are representative. Named references are available under NDA during qualification.
How does the air-gapped platform handle compliance updates (e.g., MSIHC revisions, Factories Act amendments)?
The Care team prepares the update package, validates it in a staging environment, and delivers it to the plant via USB during a scheduled maintenance window. The plant's Compliance Officer reviews the package. The update is applied during the next maintenance window with rollback protection.
How long did the air-gapped deployment take?
14 weeks from contract signature. The air-gapped commissioning adds 3 to 4 weeks versus a Cloud baseline. The MSIHC-specific induction module configuration and the per-zone access rule configuration added another 2 weeks but were scheduled in parallel.
Does the platform support multiple MAH categories within one plant (e.g., multiple Schedule rules)?
Yes. The plant has 4 distinct hazard zones, each with different MSIHC schedule classifications. Per-zone induction modules, per-zone access rules, per-zone evidence chains. All configured during deployment.
Can the defence-adjacent supply chain customer verify the audit chain independently?
Yes. The customer's annual supply chain audit reviews the air-gapped audit log at the plant. The log is signed and tamper-evident. The customer's auditor has independently verified the integrity of the chain across multiple audit cycles.
What is the upgrade path if MSIHC adds new categories or hazard zones?
Configuration-only. New zones, new induction modules, new access rules are all configurable from the local console. No platform re-deployment. The Care team handles the configuration design during the change.
One event. Six audit narratives.
Every gate read, every kiosk submission, every certificate validation lands in a single tamper-evident, signed log. From that one event, six modules produce six distinct evidence trails, for six different audits, six different inspectors and six different heads inside the plant.