Energy & Resilience 8 min read Published 16 June 2026

Will your IoT sensors survive load shedding?

By Frank Guo · Technology & Product Leadership, addanode

TL;DR — Load shedding rarely damages IoT sensors. What it kills is the data: a cloud-only system loses connectivity and stops recording the moment the power drops, leaving holes exactly when something interesting often happens. The fix is to design for outages from the start — buffer readings at the edge so nothing is lost, back the edge device and gateway with a small UPS or battery so they keep running through a slot, and let the system catch up and sync when power returns. For remote sites, solar plus battery removes the dependency on the grid entirely. Build it this way and a grid outage — load shedding or load reduction — is a non-event in your data. Build it cloud-only and every outage is a blind spot. Eskom reported 462 consecutive days without load shedding by 21 August 2026; load-reduction schedules and local faults remain, and the design rule does not change.

The real failure isn't the sensor

When people ask whether their IoT will "survive load shedding," they're usually picturing a sensor frying. That's not the problem. Industrial sensors are robust and draw almost nothing. The failure that actually hurts is quieter: the system stops seeing. The moment grid power drops, a cloud-dependent deployment loses its gateway, its router, or both — and from that instant until power returns, nothing is recorded. You don't get an alarm. You get a gap.

And the gap matters more than it looks. The transitions into and out of an outage — equipment shutting down hard, restarting under load, pumps losing prime, cold chain drifting, generators picking up — are often exactly the events you most want a record of. A monitoring system that goes blind precisely when conditions get interesting isn't monitoring; it's reporting the easy hours and hiding the hard ones.

Design test: ask any IoT vendor one question — "what happens to my data during a two-and-a-half-hour outage block?" If the answer isn't "it's buffered locally and syncs when power returns," the system was designed for somewhere that isn't South Africa.

The four things that actually go down

  • Connectivity. Your Wi-Fi router, fibre ONT or 4G modem usually share the building's power. When it goes, so does the link to the cloud — even if the sensor is still alive.
  • The gateway / edge device. If it has no backup power, it reboots when the power returns and any unsent readings held only in volatile memory are gone.
  • The cloud round-trip. Architectures that send every reading straight to the cloud with no local store have nowhere to put data during an outage, so it's simply lost.
  • The mains-powered sensor itself. A sensor wired to the same circuit as the load it watches dies with that load — and often you want to keep watching while the load is down.

Notice that three of the four are about continuity of recording and reporting, not about the sensing element. That's why the answer is architectural.

The real failure is not the sensor Four things go down when the power does, and only one of them is the measuring element. Connectivity shares the building's supply, an unbacked gateway loses whatever was in volatile memory, and an architecture with no local store has nowhere to put readings at all. Continuity of recording is an architectural property, not a sensor specification. What actually goes down What that costs you Connectivity: the router, fibre ONT or 4G modem It shares the building's power. The sensor can be perfectly alive while the link to the platform is gone. The gateway or edge device With no backup power it reboots when the power returns, and anything held only in volatile memory goes with it. The cloud round-trip An architecture that sends every reading straight up has nowhere to put data during the outage, so the readings are simply lost. The mains-powered sensor itself Wired to the same circuit as the load it watches, it dies with that load — and the outage is often exactly when you wanted to keep watching. What three of the four have in common They are about continuity of recording and reporting, not about the sensing element. Which is why the answer is architectural rather than a better sensor.
The real failure is not the sensor Three of the four failures are about recording and reporting, not about sensing. What goes down → What it costs Connectivity: the router, fibre ONT or 4G modem It shares the building's power. The sensor can be perfectly alive while the link to the platform is gone. The gateway or edge device With no backup power it reboots when the power returns, and anything held only in volatile memory goes with it. The cloud round-trip An architecture that sends every reading straight up has nowhere to put data during the outage, so the readings are simply lost. The mains-powered sensor itself Wired to the same circuit as the load it watches, it dies with that load — and the outage is often exactly when you wanted to keep watching. What three of the four have in common They are about continuity of recording and reporting, not about the sensing element. Which is why the answer is architectural rather than a better sensor.
The four failures above, each with what it actually costs. Only one of them is the measuring element — which is why the fix is an architecture rather than a better sensor, and why the design section below reads as a list of places to put a battery and a buffer.

How to design IoT that rides through load shedding

  1. Buffer at the edge. The edge device stores readings in non-volatile local memory and forwards them to the platform. If the link is down, data queues locally and uploads when connectivity returns — no holes. This single design choice solves most of the problem.
  2. Back the critical kit with a small UPS or battery. The edge device, gateway and modem draw very little, so a modest UPS or battery pack carries them through a typical 2–2.5 hour slot. Keep recording even while the heavy plant is off.
  3. Make sensors independent of the load they watch. Power monitoring sensors from a backed-up rail, not from the circuit they're measuring, so you can see the load going down and coming back.
  4. Use store-and-forward connectivity. Low-power networks like LoRaWAN tolerate intermittency well; pair them with edge buffering so a dropped link is a delay, not a loss (see our connectivity guide).
  5. Sync and reconcile on recovery. When power and network return, the system uploads the buffered window and timestamps it correctly, so your dashboards and reports show a continuous record across the outage — not a gap with a question mark.
  6. Alert on the outage itself. Treat a power loss as a monitored event: log when the site dropped, how long it was down, and what state things were in on either side. That turns load shedding from a blind spot into useful operational data.

Remote sites: cut the grid dependency entirely

For a borehole, a remote reservoir, a field weather station or a livestock water point, the cleanest answer is to stop depending on Eskom at all. The power budget of an edge device plus low-power sensors and a LoRaWAN radio is small enough that a modest solar panel and battery runs it indefinitely, with no grid connection to lose. Load shedding simply doesn't apply. We cover the sizing of this in our solar-powered monitoring guide — but the principle is simple: at remote-site power levels, off-grid is often easier and more reliable than fighting the grid.

What "load-shedding-proof" really means

It doesn't mean your plant keeps producing through an outage — that's a generator and energy question. It means your visibility never goes dark: every reading is captured, the record is continuous across the outage, and you can see exactly what happened before, during and after. The difference between a system that does this and one that doesn't is entirely in how it was architected — and it has to be designed in from the start, because bolting resilience onto a cloud-only system afterwards is expensive and never quite complete.

This is baked into how we build at addanode. Every deployment on the addaNet platform buffers at the edge and reconciles on recovery, and we size backup power for the gateway as standard — because we engineer for South African sites, not imported assumptions. It's the same resilience that underpins our water and mining monitoring work, where an outage is often the exact moment the data matters most.

Frequently asked questions

Does load shedding actually damage IoT sensors?

Rarely. Industrial sensors are robust and draw very little power. The real damage is to your data: a cloud-only system stops recording the moment connectivity drops, leaving gaps exactly when the interesting events — shutdowns, restarts, pumps losing prime — tend to happen. The fix is architectural, not a tougher sensor.

How do I stop losing data during an outage?

Buffer at the edge. The edge device stores readings in local non-volatile memory and forwards them to the platform; if the link is down the data queues and uploads when connectivity returns. Back the edge device, gateway and modem with a small UPS so they keep recording through the slot.

Will a small UPS really keep monitoring running through an outage block?

Yes — the edge device, gateway and modem together draw very little, so a modest UPS or battery pack comfortably carries them through a typical 2–2.5 hour slot. You don't need to back the whole plant, just the thin layer that keeps recording and reporting.

What about a remote site with no reliable grid at all?

Go off-grid. At remote-site power levels — an edge device, low-power sensors and a LoRaWAN radio — a modest solar panel and battery runs the whole thing indefinitely, with no grid connection to lose. For boreholes, reservoirs and field stations this is often more reliable than a grid feed.

Can I retrofit load-shedding resilience onto an existing cloud-only system?

Partly, but it's harder and more expensive than designing it in. Adding edge buffering and backup power after the fact often means new hardware and rework. It's far cheaper to architect for outages from day one — which, for a South African deployment, should simply be the default.

Worried about gaps in your monitoring?

Tell us where your sites are and how they're powered. We'll show you exactly how to make your IoT keep recording through load shedding — buffered, backed up, and continuous across every outage.