Risk Comparison — Vendor vs DIY

For each risk, rated Likelihood × Impact for both builds. Impact is measured in "how much crop / money / trouble".

Crop-loss risks (highest impact)

Risk 1 — Flowering HVAC undersized, crop damage in July/August heatwave

VendorDIY
LikelihoodHIGH — 15 kW nameplate derates to ~9.6 kW effective vs 20 kW demand. Every hot day the room creeps to 30+ °C canopy.LOW — 6 × 5.2 kW Midea = 31 kW nameplate, ~20 kW effective, sized for the load.
Impact€15–30 k lost yield per bad week, terpenes volatilised, quality crashMinimal — room holds setpoint ±2 °C
MitigationAdd a second UCHA60 per room (€3 200 × 2 = €6 400 + install)Already mitigated by N+2 sizing

Risk 2 — HVAC single-point failure mid-flower

VendorDIY
LikelihoodMEDIUM — 1 unit per flowering room, Chinese commercial, 5-year nominal lifeLOW (for crop-loss) — requires 3 of 6 units to fail simultaneously
ImpactCrop dead in 4–8 hours; replacement 4–6 weeks; €15–30 k lostTemps rise 2 °C for 48 h, €500 swap in 3 hours
MitigationKeep a spare €3 200 UCHA60 on site + trained installer on callKeep 2 × €500 spare Mideas on site (already in BOM)

Risk 3 — Dehumidifier saturation → botrytis outbreak

VendorDIY
LikelihoodMEDIUM — 276 L/day sized to upper edge of moisture load, no headroomLOW — same units + 1 backup 90 L/day
ImpactBotrytis spreads to whole room in 72 h, ~20–40 % of crop unsaleableSame impact if it happens, but less likely
MitigationAdd a standby 90 L/day unit ready to deployAlready in BOM

Risk 4 — Grid outage > 4 h during flower → crop dead

VendorDIY
LikelihoodMEDIUM — Malta has summer outagesMEDIUM — same grid
Impact (vendor, no backup)Full crop loss if outage > 4 h during day cycleMinimal — Ecoflow battery holds HA + critical sensors + can gracefully kill lighting contactor
MitigationAdd €3 200 backup + graceful shutdown (not in vendor bid)Already in BOM
VendorDIY
LikelihoodHIGH — every ISP, every vendor cloud, eventuallyZERO — no cloud dependency
ImpactAlerts stop, remote monitoring stops, schedule updates stop. Local schedule continues executing. 3 AM dehu failure goes unnoticed until morning = botrytis start.Zero
MitigationBuy cellular backup router + hope both vendor clouds stay upN/A
VendorDIY
LikelihoodLOW–MEDIUM over 5 years — Growlink is small; Revolv, Wink, Insteon precedentZERO — Home Assistant is FOSS, forkable, sustained by Nabu Casa + community
ImpactEntire €11.3 k Growlink kit turns into paperweight. Replacement = rebuild automation from scratch.Zero
MitigationNone — single-vendor lock-in by definitionN/A

Compliance risks

Risk 7 — Malta licensing inspection fails on security

VendorDIY
LikelihoodHIGH — no cameras, no access control, no door logging in bidLOW — full security in BOM
ImpactLicence delay / revocationZero

Risk 8 — Neighbour complaint on odour

VendorDIY
LikelihoodCERTAIN once flowering starts — no carbon filtration in vendor bidLOW — Phresh carbon on all scrubbed rooms
ImpactLegal action, enforced shutdown until remediated, emergency install of €3 k scrubbersZero

Risk 9 — Electrical inspection fails

VendorDIY
LikelihoodLOW — vendor installs commercial hardwareMEDIUM — DIY control panels may not pass without licensed electrician sign-off
ImpactReworkRework
MitigationVendor coversNon-negotiable: licensed Polish electrician pre-wires, licensed Maltese electrician signs off the mains side. Budget in DIY BOM.

Operational risks

Risk 10 — Sensor fails silently in flowering room

VendorDIY
LikelihoodMEDIUM — Growlink Canopy LINK + Terralink are reliable but single-sensor per roomLOW — HA runs median of 4 canopy sensors per room, rejects bad probes
ImpactWrong climate decisions, quality dropMinimal

Risk 11 — Water sensor / dosing pump failure → bad EC/pH batch

VendorDIY
LikelihoodLOW — Autogrow IntelliDose has internal diagnosticsLOW (we keep IntelliDose) + downstream Atlas EZO catches drift
Impact1 day of bad irrigation; flushableSame

Risk 12 — LED board failure in year 3

VendorDIY
LikelihoodHIGH for Chinese no-name at €399 — expect 30–40 % attrition by year 4LOW for Mars Hydro / Spider Farmer — 2 yr warranty + typical 5–7 yr real life
ImpactReplacement cost €400 per fixture, downtimeWarranty replacement if within 2 years, minor loss if out-of-warranty

Risk 13 — CO₂ poisoning worker incident

VendorDIY
LikelihoodLOW if CO₂ actually gets installed (which is a scope gap); HIGH if it's bolted on later without safety integrationLOW — hardware CO₂ alarm wired into contactor coil, independent of HA
ImpactWorker injury / death, criminal liabilitySame if it happens
MitigationVendor's Growlink Climalink controls the solenoid but there's no standalone alarm in the bid€160 standalone alarm already in BOM and non-negotiable.

Financial / business risks

Risk 14 — Hidden scope discovered after lease signed

VendorDIY
LikelihoodHIGH — €10–12 k of hidden scope (CO₂, carbon, backup, security, drip lines, etc.)ZERO — DIY BOM is explicit
ImpactSchedule delay + cost overrunZero

Risk 15 — User (DIY builder) unavailable mid-build

VendorDIY
LikelihoodN/A — vendor-deliveredMEDIUM — any single-integrator DIY build depends on the integrator
ImpactN/ABuild stalls, customer inherits half-finished facility
MitigationN/ADocument everything. Train customer's staff on HA dashboards. Write runbooks for common failure modes.

Risk 16 — HA / Home Assistant learning curve for customer

VendorDIY
LikelihoodN/AMEDIUM — customer has to learn HA for day-to-day adjustments
ImpactN/A2–4 weeks of hand-holding post-install, or permanent dependency on the integrator
MitigationN/ABuild customer-facing dashboards that hide HA complexity (read-only operator view, write-only admin view)

Risk 17 — Insurance won't cover DIY-built facility

VendorDIY
LikelihoodLOW — vendor-installed commercial hardware is standardUNKNOWN — check with Maltese insurer before committing. DLC-listed fixtures + F-gas install certificate + licensed electrician sign-off usually satisfy insurers.
ImpactUninsurable = cannot operateSame
MitigationN/AAction item before signing anything: get insurer quote on both builds.

Summary heat map

RiskVendor likelihood × impactDIY likelihood × impact
HVAC undersized → heat damage🔴 HIGH × HIGH🟢 LOW × LOW
HVAC single-point failure🟡 MED × HIGH🟢 LOW × LOW
Dehu saturation → botrytis🟡 MED × HIGH🟢 LOW × HIGH
Grid outage → crop loss🔴 MED × EXTREME🟢 LOW × LOW
Cloud outage🔴 HIGH × MED⚪ N/A
Vendor folds🟡 LOW × EXTREME⚪ N/A
Licensing — security🔴 HIGH × HIGH🟢 LOW × LOW
Odour complaint🔴 CERT × HIGH🟢 LOW × LOW
Electrical inspection🟢 LOW × MED🟡 MED × MED (mitigated by licensed sign-off)
Sensor silent fail🟡 MED × MED🟢 LOW × LOW
LED board failure yr 3🔴 HIGH × MED🟢 LOW × LOW
CO₂ poisoning🟡 LOW × EXTREME🟢 LOW × EXTREME
Hidden scope🔴 HIGH × MED🟢 LOW × LOW
User unavailable⚪ N/A🟡 MED × MED
HA learning curve⚪ N/A🟡 MED × LOW
Insurance incompatibility🟢 LOW × EXTREME🟡 UNKNOWN × EXTREME (verify first)

Net risk posture

Vendor build is a cheaper-looking bid with higher tail risk: the €82 584 number hides €10–12 k of scope gaps and a handful of single-point-of-failure crop-killing risks. In a good year the facility works. In a bad year (summer heatwave + grid outage + cloud outage + botrytis outbreak) the vendor build has no fallback.

DIY build is a fully-scoped bid with mitigated tail risk: higher upfront documentation burden, modest user-dependency risk, and one genuine unknown (insurance). In exchange: no single-point-of-failure in crop-critical systems, full local operation, N+2 HVAC, and no cloud lock-in.

The DIY approach trades vendor dependency for integrator dependency. That's a real tradeoff and the customer needs to understand it before signing.