Power Bay Pty Ltd is committed to providing secure connected products for Australian consumers.

This statement is published in accordance with the Cyber Security (Security Standards for Smart Devices) Rules 2025 (Australia) for Powerbay Heat Pump Hot Water Systems incorporating Wi-Fi connectivity through the Tuya Smart / Smart Life platform.

Product Covered

This statement applies to the following Wi-Fi enabled products: Powerbay Heat Pump Hot Water Systems using:

• Tuya Smart App
• Smart Life App
• TuyaOS Version 3.3 or later

1. Password Requirements

Powerbay confirms that the above products comply with the password requirements prescribed under Schedule 1 Part 1 Clause 2 of the Cyber Security (Security Standards for Smart Devices) Rules 2025.

Specifically:

• No universal default password is used.
• Each user creates their own account credentials when registering a Tuya Smart or Smart Life account.
• Authentication is managed through the Tuya Cloud platform.
• Customers are responsible for selecting and maintaining a strong password for their account.

Powerbay products do not contain factory-set default passwords that are common across multiple devices.

2. Reporting Security Vulnerabilities

Powerbay welcomes responsible disclosure of potential security vulnerabilities.If you believe you have discovered a security issue affecting a Powerbay connected product, please contact us using the details below.

Security Contact Email: security@powerbay.com.au

Please include:

• Product model
• Firmware version (if known)
• Description of the issue
• Steps to reproduce
• Any supporting screenshots or logs

Powerbay will acknowledge receipt of vulnerability reports and investigate reported issues in accordance with our internal security response procedures.

3. Security Updates and Support Period

Powerbay provides firmware updates through the Tuya Smart platform where applicable.

Security updates may include:

• Vulnerability remediation
• Security patches
• Stability improvements
• Reliability improvements

The minimum security support period for the above products is:

Security updates will be provided until 31 December 2030 After this date, Powerbay may cease providing security updates for these products.

Customers are encouraged to keep their products connected to the internet and enable automatic firmware updates where available.

4. Software Platform

The Wi-Fi connectivity of this product is based on the TuyaOS platform developed by Tuya Smart.

Tuya Smart periodically releases security updates for TuyaOS.

Where applicable, Powerbay integrates these updates into product firmware and distributes firmware updates through the Tuya Smart platform. You can refer to Tuya Developer page for more information: https://developer.tuya.com/en/docs/iot/Statement_SSSD?id=Kf74sdzpxrw3a 

5. Customer Responsibilities

To help maintain device security, customers should:

• Install firmware updates when available.
• Use a strong, unique password for their Tuya Smart account.
• Enable multi-factor authentication on their Tuya account where available.
• Keep their home Wi-Fi network secured.
• Report suspected security issues to Powerbay.

Declaration

Power Bay Pty Ltd declares that the above products comply with the applicable requirements of the Cyber Security (Security Standards for Smart Devices) Rules 2025 (Australia) relating to:

• No universal default passwords
• Publication of a means to report security issues
• Publication of the minimum period during which security updates will be provided

This declaration applies to Powerbay Wi-Fi enabled Heat Pump Hot Water Systems using the Tuya Smart platform.