EnergyTec public assets
This host serves a small number of static files that have to be readable by third parties without signing in, such as the logo shown on a vendor consent screen. That is its entire purpose.
Everything published here is world-readable, deliberately. It is the only EnergyTec web endpoint with no sign-in. Every other application requires Entra authentication.
The anonymous access is a requirement, not an oversight. Do not add authentication or an IP allow-list to this host: doing so breaks the third-party integrations that depend on fetching these files.
Published files
- /app-logo.png: the EnergyTec wordmark.
- /tandc.pdf: application terms and conditions.
- /privacypolicy.pdf: privacy policy, as published at energytec.com.au, which remains the current version.
What belongs here
- Brand assets, such as logos and icons.
- Publicly published policy documents.
- Anything that is already public, or that is intended to be.
What must never be published here
- Anything identifying a customer, plant owner or member of staff.
- Operational data, exports, reports or screenshots of internal systems.
- Credentials, keys, tokens or connection strings of any kind.
- Anything that has not been checked against the project's sensitive-terms list.
Publishing is a pull request against a private repository, reviewed and merged by a person. There is no upload form and no drag-and-drop, so that every file ever made public has a commit, an author and a diff behind it.
Requesting a file
Raise it with the EnergyTec development team. Include what the file is, which third party needs to read it, and confirmation that it contains nothing from the list above.