← Elevate Aura  ·  Product Development, embedded & device software Chennai, India · WhatsApp
Software-only, field updates

An OTA update path, built before the device leaves the building.

Elevate Aura builds the over-the-air update path for connected devices: how a new build is published and delivered, how a device knows which version it is running, what happens when an update fails, and how an owner triggers one from the companion app.

Delivery, verification and installVersion tracking across the fleetRollback when a build does not boot
In one sentence

What an OTA update system has to get right

An over-the-air update system is how firmware reaches a device that is already in a customer's hands. Elevate Aura builds that path end to end: publishing a build, delivering it over Wi-Fi, BLE or a gateway, verifying it before it is trusted, installing it, and recording which version each unit is now running.

The hard part is failure. An update that arrives half way through a power cut, or a build that starts and then stops responding, must leave a working device behind. We design that behaviour generically around your controller and its storage: the running image is not discarded until a new one has proved it boots, and a device that cannot confirm a healthy start returns to what it had.

We also build the human side: the version view across your fleet, staged rollout to a small group first, and an update the owner can trigger from the companion app. Hardware, storage layout capability and the bootloader support on the part are your hardware team's territory. This is a software-only engagement.

The field problem

The bug is fixed. The devices are in other people's buildings.

Without an update path, every firmware defect becomes a logistics problem with a travel budget attached to it.

Site visits to flash a device

An engineer drives out with a programmer to change three lines of code.

Nobody knows what is running where

Support cannot answer the first question of any investigation: which build is on that unit.

A failed update bricks a unit

The old image was erased before the new one had proved it could boot.

Everything updated at once

A bad build reaches the whole fleet in an afternoon because there was no staged rollout.

How the work runs

From a published build to a device running it safely.

01

Scope the part

Controller, storage, bootloader support and the link the update travels over.

→
02

Publish

A build is versioned, signed and made available to the fleet or a subset.

→
03

Deliver

Download over Wi-Fi, BLE or a gateway, resumable and power aware.

→
04

Verify and install

Integrity and signature checked before anything is written or trusted.

→
05

Confirm or roll back

The device proves a healthy boot, or returns to the previous working image.

→
06

Report

Version, outcome and any error recorded against the unit.

What is built

The update path, on the device and around it.

🔄On the device

  • Download and resume handling
  • Signature and integrity checks
  • Install and healthy-boot confirmation
  • Return to the previous image on failure

🔢Versioning

  • Version reported by every unit
  • Compatibility rules before an install
  • Update history per device
  • Settings preserved across updates

☁Delivery

  • Build publishing and storage
  • Staged rollout to a pilot group
  • Retry for devices that were offline
  • Supabase or Azure backend

📱People

  • Update triggered from the app
  • Progress and failure messages
  • Fleet version view on a dashboard
  • Runbook for your support team
In practice

What an update path is worth.

A defect found after shipping

Workflow: A fix is published to a pilot group, confirmed against their reported version, then released to the rest of the fleet.

Result: A firmware fix without a travel plan.

An owner updating from the app

Workflow: The app shows that a newer build exists, the owner starts it, and progress and any failure are shown plainly.

Result: Updates happen without a support ticket.

An update interrupted by a power cut

Workflow: The partially written image never becomes the running one, and the device starts on the build it already had.

Result: A unit that comes back on rather than going to the workshop.

Who it is for

Anyone shipping firmware they cannot reach by hand.

🩺
Medical device makers

Units in clinics and homes.

🤖
Robotics companies

Machines on customer sites.

🏭
Equipment makers

An installed base across regions.

📡
IoT product teams

Connected devices at volume.

🚀
Hardware founders

First shipment, first field fix.

🛠
Service teams

Fewer visits, faster fixes.

The honest comparison

Getting updates to the field, three ways.

 
Manual flashing
Vendor OTA platform
Elevate Aura
Reaching a shipped unit
A site visit
Yes, on their terms
Yes, on your backend
Rollback on a failed boot
Not applicable
Usually
Designed for your controller
Fleet version view
A spreadsheet
Their console
Your dashboard, your data
App triggered update
No
Sometimes
Built with your companion app
Where the data lives
Nowhere
Vendor cloud
Your Supabase or Azure
Questions

OTA firmware updates, answered.

What stops a failed update from bricking a device?

The new image is verified before it is trusted and the previous working image is kept until the new one has confirmed a healthy start. A device that cannot confirm that start returns to the build it was running. The exact arrangement depends on the storage and bootloader support your controller offers.

How does an update reach the device?

Over whatever link the product already has: Wi-Fi to your backend, BLE from the companion app, or a gateway on the machine's own bus. Downloads resume after an interruption rather than starting again from the beginning.

How do we know which version each unit runs?

Every device reports its version, and that is recorded against the unit with its update history and any failure. The fleet view sits on a dashboard your support team uses. See device dashboard development.

Can an owner start the update themselves?

Yes. The companion app shows that a newer build is available, starts the update, shows progress and reports failures in plain language rather than an error code. See device companion app development.

Do you work on the bootloader or the hardware?

We work in software only. Where your part provides bootloader and storage support for updates we write to it, but the controller choice, memory layout capability, board and hardware route stay with your team. We do not design PCBs or certify anything.

Keep exploring

Related device software services

Decide the update path before the first unit ships.

Tell us the controller, its storage and how the device connects. We will scope an update path that fits the part you have, including the app side and the version view across your fleet.

Founder-led · Chennai, India · Built and supported by the person who wrote it