Skip to content
Wearing gloves
Cold warehouse
More than a few seconds

Tech · 9 July 2026 · 6 min

Companies, having everything under control does not mean controlling everything

An uncomfortable question

Who touched this part, when, and with what outcome?

Exteryo Report Editorial Team

Identification, serialisation, tracking and security: the four levels of industrial control, and why skipping one takes value away from the project.

The short answer

Having everything under control means being able to say, for every relevant object, who touched it, when and with what outcome.

The short answer

To get there, three things are needed:

  • Identitya digital identity for the object
  • Eventan event recorded at the moment it happens
  • Actiona collection action simple enough to actually be done

The short answer

Underneath there are four levels: identification, serialisation, tracking and security.

Why it is not simple

Claiming to have processes under control is easy.

Proving it? No.

Why it is not simple

Then comes the audit, or a return, or a line stoppage. If the answer requires a phone call, an Excel file and half a day of reconstruction, the control was not there.

Chapter 1 of 4

What is being controlled, if not people?

Objects, not people

The control we are talking about does not concern people: it concerns objects, processes and events.

Objects, not people

It means that every relevant asset, a garment, a PPE, a machine, a pallet, a street lamp, has a digital identity. Every event concerning it is recorded at the moment it happens, not after the fact.

Tap the tag

Reconstruction or fact?

Reconstruction or fact?

Reconstructed afterwardsit depends on the memory, good faith and availability of the person providing it.
Collected on siteby a device reading a unique identifier, is a fact.

Note

A phone call, an Excel file and half a day: that is the cost of data reconstructed afterwards.

Chapter 2 of 4

What are the four levels of control?

In layers

Control is built in layers, and each layer enables the next.

The four levels

  • Identificationthe object is distinguishable from all others, even from identical ones
  • Serialisationthat identifier corresponds to a record, with master data, history and documents
  • Trackingmovements and events accumulate on that record over time
  • Securitythe identifier cannot be cloned, the record cannot be altered, access is governed

Before moving on

A tracking system based on duplicable identifiers: which level is missing?

In layers

Skipping a level takes value away from the entire project.

In layers

A tracking system built on duplicable identifiers produces data that no one will use to make a decision, because no one trusts it.

Note

The order matters: tracking accumulates events on a record, and the record only exists if the object has first been identified and serialised.

Chapter 3 of 4

Where does it usually break?

The last metre

The breaking point is often not the technology: it is the last metre.

The last metre

It is the moment when an operator, wearing gloves, in a cold warehouse, has to record something.

1 of 3

An operator, wearing gloves

2 of 3

In a cold warehouse

3 of 3

More than a few seconds

The last metre

If that action takes more than a few seconds, or requires a dedicated device they do not have with them, it will not be done.

The last metre

It will be done later, from memory, or it will not be done at all.

The choice is not neutral

An NFC tag read with the smartphone that the operator already has in their pocket has a different adoption rate than a UHF reader that must be picked up from the trolley.

NFC Forum: NFC technology and the devices that read it ↗

The choice is not neutral

They answer two different questions:

  • NFC taga specific object
  • UHF readera set of objects in transit

Note

It will be done later, from memory: this is exactly the reconstructed data from the first chapter.

Chapter 4 of 4

What to ask yourself before buying anything?

Three questions

Before evaluating tags, readers or platforms, three questions are needed.

Three questions

  • The decisionWhat decision do I want to make with the data I collect?
  • The actionWho performs the action of collecting, and in what physical conditions?
  • The errorWhat happens if the data is missing, or is wrong?

Three questions

If there is no downstream decision, the data is a cost.

The question about security

What happens if the data is missing, or is wrong?

Three questions

The answer tells you how robust the security level needs to be.

An assembly

A control project that starts from these three questions almost always arrives at a combination of hardware and software, not a single product.

Note

Exteryo was born as a multicommerce B2B platform because the right answer is almost always an assembly: it is worth knowing this while reading these questions.

In one sentence

Having everything under control doesn't mean controlling everything: it means knowing who touched this part, when, and with what outcome.

Exteryo Report

Takeaways

Six questions to know if the control is really there. To be asked before evaluating tags, readers or platforms.

0 of 6 checked

Write with us

Want to write for Exteryo Report?

If you would like to write or publish an article, or collaborate with us, email the editorial team or get in touch through the contact form.

Sources

Editorial note: Exteryo Report is promoted by Exteryo, a multicommerce B2B platform of hardware and software for control. The article is a general analysis; the link on NFC reading refers to the public source indicated.

Images and animations: illustrative objects generated with artificial intelligence. They do not depict real objects or documents mentioned in the article.

ExteryoExteryo Report · 9 July 2026