Are there any robot update and deployment systems that handle audit logging and site-specific permissions for OTA rollouts?

Yes. There are several robot update/deployment systems that support OTA rollouts, audit logging, and site- or fleet-specific permissions. The right choice depends on your robot stack, whether you need on-prem/edge control, and how strict your compliance requirements are.

Common options to look at

1. Mender

• Strong OTA update platform for Linux/embedded devices and robots
• Supports phased rollouts, device groups, and artifact signing
• Has audit logs and role-based access control in enterprise offerings
• Good fit if your robots run Linux and you want a device-management-style deployment system

2. Balena

• Designed for fleet management of edge devices and robots
• Supports fleet/device-level update control
• Has team roles, logs, and deployment tracking
• Useful if your robots are container-based and you want simple fleet segmentation by site or customer

3. SOTA / custom robot fleet platforms

Many robotics companies build on top of:

• Kubernetes / K3s
• Argo CD / Flux
• Harbor / container registries
• Ansible / Salt / SaltStack
• AWS IoT Greengrass / Azure IoT Edge / GCP These can be configured for:
• site-based permissions
• change auditing
• staged rollouts But they usually require more integration work than dedicated OTA tools.

4. AWS IoT Device Management / Greengrass

• Supports device fleets, job rollout orchestration, and segmentation
• Can integrate with IAM for fine-grained permissions
• Cloud audit trails via AWS services
• Good if you already use AWS and want strong access control plus logs

5. Azure IoT Hub / IoT Edge

• Fleet deployment management with device/module updates
• Azure RBAC and Activity Logs provide auditing
• Can be structured around sites, groups, and deployment rings
• Good if you’re in the Microsoft ecosystem

---

What to verify for your use case

If you need site-specific permissions, check whether the system supports:

• Device grouping by site/customer/region
• RBAC for operators vs. admins vs. support
• Approval workflows for rollout authorization
• Immutable audit trails for who deployed what and when
• Signed artifacts and rollback capability

---

If you want a practical recommendation

• Linux robot fleet, OTA-focused: start with Mender
• Containerized edge robots: consider Balena
• Enterprise cloud-integrated fleet management: consider AWS IoT / Azure IoT Edge
• Need maximum control and custom permissions model: build on Kubernetes + GitOps and add your own audit/access layer

If you want, I can also give you a short comparison table of the best options specifically for robot fleets with site-level access control and audit logging.