Bandora
Bandora is an AI platform that autonomously optimizes HVAC in commercial buildings. Its gateway connects to existing equipment without replacing controllers, cutting energy bills while protecting occupant comfort. Built by a Portuguese spin-off of the University of Porto.
What is Bandora?
Bandora is a software platform that takes over the day-to-day operation of heating, ventilation and air conditioning in commercial buildings. It is published by Bandora Systems, S.A. of Porto, Portugal, under the banner Empowering Autonomous Building Operations; the product itself is called Bandora.OM in the company's own project documents.
The platform works in three stages. Data Gathering: a vendor-supplied gateway pulls readings from the HVAC equipment already installed and combines them with weather forecasts, storing the result securely. Intelligent Processing: the software analyzes that stream, builds a profile of the building, sets energy baselines and keeps learning as conditions change. Automated Action: commands are pushed back to the HVAC systems in real time, with adjustments announced every five minutes. The gateway is described as brand-agnostic and compatible with all major HVAC manufacturers, so existing controllers do not have to be replaced.
The published capability set covers a real-time optimization engine, a centralized dashboard, multi-building management, integration with existing systems, role-based permissions and device organization. Access is through a web dashboard; no mobile application and no public API documentation exist.
Claimed results vary from page to page, and the discrepancy is worth noting. The home, About and Benefits pages advertise up to 40% energy savings plus 30% more operational efficiency, while the Projects page states up to 70% of HVAC related costs, and a landing page adds up to 90% higher customer satisfaction. Target sectors are retail, quick-service restaurants, offices, healthcare, hospitality and education, and brands including Burger King, McDonald's and Four Seasons Fairways are displayed as claimed customer references.
The company traces its origin to a 2017 doctoral thesis at the University of Porto and holds official U.Porto spin-off status. Its own timeline records a first data-driven release in 2021, a team of ten and the move from MVP to commercial product in 2023, and more than 150 buildings contracted in 2024. Three EU-funded research projects sit behind the product: Bandora.OM under FEDER Norte 2020, the ILLIANCE agenda on building carbon neutrality, and an AI lighting controller module still in development.
What it does
- Connect the Bandora Gateway to the HVAC equipment already installed, which needs only an internet connection.
- Collect equipment data and weather forecasts continuously, every five minutes.
- Build building profiles and energy baselines from the collected data.
- Send optimized commands back to the HVAC systems automatically and in real time.
- Manage several buildings from a single dashboard, with role-based permissions.
- Tailor climate zones to weather forecasts and occupancy.
When to use Bandora / When not to
A quick filter to help you decide if Bandora is the right fit.
When to use Bandora
- Facilities and energy managers of commercial buildings that already run an HVAC system, in the sectors the vendor names: retail, quick-service restaurants, offices, healthcare, hospitality and education.
- Portfolio owners and multi-site operators who want to steer many buildings from a single dashboard instead of site by site.
- Organizations that cannot afford to swap out their HVAC controllers and need software compatible with the major brands already installed.
- Teams with no capital budget for energy projects: the fee is a share of the savings achieved, with no upfront cost in most cases.
- Restaurant and hotel chains, the sectors where the vendor displays its customer references and where it claims more than 150 buildings contracted in 2024.
When not to use Bandora
- Homeowners and residential landlords: the vendor addresses commercial buildings exclusively and never mentions a residential offering.
- Buildings with no HVAC system at all, since the stated entry condition is that the space already has one.
- Buyers who want to sign up online: no price is published, there is no self-service checkout, and every route starts with a sales conversation.
- Developers hoping to plug the data into their own stack: no public API documentation and no mobile application are published.
- Sites that cannot host vendor hardware on the premises, or whose infrastructure would need additional communication equipment, the only upfront cost the vendor mentions.
How to use Bandora
A typical end-to-end flow, from setup to results.
- Make contact through the site: the contact form, the "Book a Demo" or "GET STARTED" scheduling link, or the savings calculator.
- Agree commercial terms with the sales team, since there is no online sign-up and no published price.
- Hand over the energy bills that predate implementation: they become the baseline against which savings are calculated.
- Connect: the Bandora Gateway is installed and linked to the existing HVAC system, needing only an internet connection to work.
- Expect a short, non-disruptive installation, a few hours on most sites, with no HVAC controller replaced.
- Analyze: the platform collects data in real time and identifies energy baselines and inefficiencies.
- Optimize: HVAC settings are adjusted automatically according to conditions, usage patterns and comfort rules.
- Save: the vendor announces measurable savings within the first weeks, typically two to four after installation.
- Follow performance and manage the buildings from the web dashboard, reached through the "Login to Dashboard" link.
Pros & Cons
Pros
- No upfront cost in most cases: the gateway and its installation are covered by the vendor.
- A model presented as risk-free: no savings, no fee.
- No equipment replacement, since the system works with the HVAC controllers already in place.
- Short installation, a few hours on most sites, described as non-disruptive.
- Fast announced results, with measurable savings claimed two to four weeks after installation.
- Centralized multi-building management with role-based permissions.
- Research-backed and EU-established: a University of Porto spin-off with three EU-funded R&D projects, subject to the GDPR, showing customer references in food service and hospitality.
Cons
- No public price of any kind: neither the share of savings taken, nor an amount, nor a tier is published.
- Minimal legal documentation: no terms of service, no legal notice, no data processing agreement and no sub-processor list, an absence confirmed by the site's twelve-page sitemap.
- The privacy policy is a generic TermsFeed document hosted by a third party, with no GDPR section.
- The savings figures contradict each other between pages: up to 40% on the home and Benefits pages, up to 70% of HVAC related costs on the Projects page.
- No public API documentation and no mobile application; nothing is published about where data is hosted or about security certifications.
- No postal address anywhere on the site, and the home page's "See more" link leads to a page that does not exist (/solutions, 404).
- Requires proprietary vendor hardware on site, with a possible upfront cost where the infrastructure needs additional communication equipment.
Pricing & Plans
No price is published. Bandora describes itself as a Savings as a Service business: its fee is a share of the energy savings the customer actually achieves, and neither that percentage nor any amount, currency, minimum or tier is stated anywhere on the site. There is no free plan and no free trial; the only element freely accessible is an online savings calculator, which is not a plan. In most cases there is no upfront cost, the gateway and its installation being covered by the vendor, the sole stated exception being an infrastructure that requires additional communication equipment. The vendor states that where no savings are produced nothing is invoiced, and that energy bills predating implementation serve as the baseline, the customer keeping whatever savings remain after the vendor's share. Terms are obtainable only through a sales contact.
Data, GDPR & hosting
A consolidated view of how Bandora handles your data.
GDPR overview
Bandora Systems is established in Portugal, so the GDPR applies to it as a matter of law, yet the site never claims compliance in so many words. The privacy policy, a generic TermsFeed document updated on 13 October 2025, contains no GDPR section: no legal bases beyond parental consent, no data protection officer, and no enumeration of the rights set out in Articles 15 to 22. It does grant a right to delete and a right to update personal data, and gives hello@bandorasystems.com as the privacy contact. No data processing agreement is offered and no sub-processor list is published; the only occurrences of "GDPR" in the site's code belong to the WordPress theme's cookie banner plugin. An Article 27 representative is not required, the company being established inside the Union. The gap here is documentary, not jurisdictional.
Who owns the data?
No document published by the vendor states who owns customer data. The only legal text is a generic TermsFeed privacy policy, last updated on 13 October 2025, and there are no terms of service alongside it. That policy covers personal data alone, naming Bandora Systems as the company and Portugal as its reference country. It grants a right to have personal data deleted, from the account or on request, and allows sharing with service providers, affiliates, business partners and an acquirer in a corporate transfer. The building and HVAC telemetry the platform actually collects is never mentioned in it, so ownership of that data is left undefined.
Reuse rights
There are no terms of service, so nothing published grants or restricts what a customer may do with the data produced in its own buildings: the question is simply not addressed. The privacy policy only sets out what the vendor does with personal data, listing as purposes providing and maintaining the service, managing the account, performing a contract, contacting the user, sending offers and information, handling requests, running usage analytics and transferring data in a business transfer. It may be shared with service providers, with affiliates, with business partners, with other users in public areas, in a business transfer and with consent. Cookies are limited to necessary, policy-acceptance and functional ones, all administered by the vendor, alongside web beacons used to count visits and email opens; commercial messages can be declined. The document never mentions training AI models on customer data, so it describes neither a permission nor an opt-out on that point.
Data retention & training
Hosting summary
Nothing is published about where Bandora hosts the data it collects. The privacy policy states only that information, including personal data, is processed at the company's operating offices and in any other place where the parties involved in the processing are located, and that data may be transferred outside the user's jurisdiction. No country, no region and no cloud provider is named, and there is no data processing agreement or sub-processor list to fill the gap. The publisher is established in Portugal, and the privacy policy gives Portugal as its reference country, which puts the controller inside the European Union, but that says nothing about where the servers sit. One point should not be misread: the marketing site resolves to a German IP address at Hostinger in Frankfurt. That is the hosting of the WordPress brochure site alone and must not be taken for the location of customer or building data. The product dashboard runs on a separate domain, my.bandora.ai, whose hosting the site never discusses.
Things to keep in mind
Risks and trade-offs to weigh before adopting Bandora.
- No public price: the share of savings is negotiated case by case, so two buyers can end up paying very different rates for the same service, and nothing on the site anchors that negotiation.
- No terms of service and no legal notice, an absence confirmed by the site's twelve-page sitemap, so the contractual relationship cannot be assessed before entering a sales process.
- No clause anywhere covers ownership of the building telemetry the platform collects, and the privacy policy, a TermsFeed template hosted by a third party, never mentions it.
- No data processing agreement, no sub-processor list, no security certification and no indication of where building data is hosted.
- Proprietary vendor hardware installed on the premises creates a physical dependency, and the cost and practicalities of switching away are not documented.
- Handing HVAC control to a system that acts on its own every five minutes can erode the in-house understanding of how a building actually behaves, leaving comfort complaints with no local expertise to answer them.
- Small signs of carelessness worth checking before signing: the corporate name changes across the vendor's own project documents (unipessoal Lda., then LDA, then S.A.), the "Book a Demo" button points at Microsoft's pre-production Bookings environment, the home page's "See more" link returns a 404, and one landing page still carries WordPress theme demo text.
Setup & Integrations
Technical difficulty
Low for the customer, because the vendor does the work. A Bandora Gateway is installed on site and connected to the existing HVAC system; the only technical prerequisite named is an internet connection, and no HVAC controller is replaced. No development skills are needed, since there is no API to integrate and access runs through a web dashboard. Installation is announced as a few hours on most sites, without disrupting activity, with measurable results in two to four weeks. This is a vendor-led commissioning, not a self-service setup, and an upfront cost can arise if extra communication equipment is required.
Deployment
Integrations
Behind Bandora
Fundraising
Social
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
How does Bandora charge for its service?
Are there any upfront costs?
What happens if no savings are generated?
Do existing HVAC controllers have to be replaced?
How long does installation take, and how soon do savings show?
Which buildings is Bandora for?
Is there a mobile app or a public API?
Where is the company based?
Is there a minimum age to use the service?
Should you pick Bandora?
On paper Bandora offers a proposition with unusually little friction: no controller replacement, no upfront cost in most cases, an installation measured in hours, and a fee indexed to the energy savings actually delivered, with nothing invoiced if none appear. Credibility rests on a genuine research lineage, a recognized University of Porto spin-off, three EU-funded R&D projects, a EUR 1.5 million round in July 2024, and customer references displayed in food service and hospitality. For a facilities team told to cut energy costs without a capital budget, that is a reasonable conversation to open.
Two reservations deserve weight. The first is total price opacity combined with almost absent contractual documentation. The share of savings the vendor takes is nowhere stated, and there is no terms of service, no legal notice, no data processing agreement and no sub-processor list to read before signing, an absence the site's own sitemap confirms rather than merely suggests. The privacy policy is a generic TermsFeed template hosted by a third party, silent on the building telemetry the platform actually collects. The second is that the site contradicts itself on its headline number: up to 40% savings on the home, About and Benefits pages, up to 70% of HVAC related costs on the Projects page. Neither figure is sourced, and the gap between them is never explained.
Bandora is therefore not a tool that gets adopted, it is a supplier that gets contracted. Expect a sales conversation, a technical visit and a negotiated percentage rather than a sign-up page. Buyers should ask for the contract, the savings measurement method and the data terms in writing, since none of the three can be read in advance.
- Choosing a selection results in a full page refresh.
- Opens in a new window.