Statement of Compliance
5367 New Peachtree Road, Suite 150, Chamblee, GA 30341
Introduction
Masterbuilt is committed to the highest standards of product security, ensuring that our smart grilling devices, mobile apps, and web services meet stringent security protocols in alignment with the UK Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023 (PSTI). This Statement of Compliance details our practices and adherence to the NIST 8259A guidelines, ETSI EN 303 645 requirements, and general PSTI requirements.
Compliance Overview
Our products are designed to comply with all applicable regulations. We ensure:
- Device Identification and Management: Each device features unique identification and secure management practices, adhering to both the NIST 8259A and ETSI EN 303 645 specifications.
- Secure Configuration: Devices are configured securely using encrypted communications and robust unique authentication methods.
- Data Protection: We enforce encrypted communications and rigorous data protection standards.
- Logical Access Control: Access to device interfaces is tightly controlled through secure APIs, unique passwords, and physical device protections.
- Software Update Processes: Firmware updates are securely managed, with user consent required for each update.
- Cybersecurity Awareness: We maintain high levels of security awareness through continuous monitoring, regular code reviews, and the integration of advanced security tools.
Product Specific Compliance
| Product Name | Compliance Status | Minimum Security Update and Support Period |
|---|---|---|
| Gravity Series 800 Grill + Smoker - Costco MB20040122 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| Gravity Series 800 Griddle - US MB20040221 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| Gravity Series 800 Digital Charcoal Grill + Smoker MB20040222 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| Gravity Series 800 Griddle - International MB20042221 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| Gravity Series 560 - International MB20041020 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| Gravity Series 560 US MB20040220 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| Gravity Series 1050 - International MB20041320 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| Gravity Series 1050 US MB20041220 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| Gravity Series 1050 Griddle MB20181622 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| Gravity Series 600 - International MB20041423 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| Gravity Series 600 - North America MB20041023 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| Gravity Series 900 with Pizza Oven - Costco MB20041823 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| Gravity Series XT - International MB20043024 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| Gravity Series XT - NA MB20041223 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| Digital Charcoal Smoker - International MB20061321 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| Digital Charcoal Smoker - US MB20060321 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| WiFi Smoker 710 - NA MB20070924 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| WiFi Smoker 710 - EU MB20072024 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| WiFi Smoker 710 - UK MB20072124 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| WiFi Smoker 710 - AUS|NZ MB20072224 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| AutoIgnite Series 545 - NA MB20041124 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
| AutoIgnite Series 545 - International MB20042724 |
NIST 8259A / ETSI EN 303 645 / PSTI 2023 | May 2025 |
Compliance Documentation
Detailed compliance documents for each product or regulation are available and continuously updated to reflect the latest security practices and regulatory requirements. These documents can be requested within 5 business days by emailing security@middlebyoutdoor.com.
Vulnerability Disclosure Policy
We encourage the reporting of potential security vulnerabilities through our dedicated channels. Our Vulnerability Disclosure Policy outlines the process for securely submitting reports and our commitment to resolving issues promptly.
Scope: This policy applies to all Masterbuilt products, services, and associated infrastructure, including mobile apps and web services.
Reporting: If you discover a security vulnerability, please report it via security@middlebyoutdoor.com Include the following details:
- Product/service affected
- Vulnerability description
- Steps to reproduce (if applicable)
Acknowledgment: We will confirm receipt of your report within 5 business days, providing a preliminary assessment within 30 business days.
Thank you for helping us maintain a secure environment.
Commitment to Security
Masterbuilt is dedicated to ongoing improvement and innovation in cybersecurity, ensuring our products are safe and secure for all users. We comply with all current and upcoming regulations and continuously assess our practices against the latest security standards.