Systems configured to enable isolated client device interaction with building automation and control (bac) networks, including third-party application access framework

A system configured to provide isolated access to a building automation and control network, the system including method including:

• a data exchange gateway that interfaces the system with a BAC (Building Automation and Control) network, wherein the BAC network provides via the gateway, on a periodic basis, data values presented by each of a plurality of physical devices on the BAC network;
• a data exchange module which is configured to receive the periodic data values from the BAC network and cause recording of those values in a BAC database isolated from the BAC network;
• a permissions rules module which is configured to associate devices for which data is stored in the BAC database with permission rules thereby to control access to data in the BAC database;
• and
• an API request handling module which is configured to receive, via an API, requests from a plurality of third-party software platforms, wherein the API request handling module is configured to, in respect of each request:
• (i) determine whether or not the request is to be permitted based on operation of the permissions rules module;
• and
• (ii) in the case that the request is to be permitted, perform a data access operation in respect of the BAC database thereby to enable fulfilment the request.
• such that the system enables selectively controlled access to the data values presented by each of the plurality of physical devices on the BAC network to a plurality of third-party applications, in an environment that is isolated from the BAC network.