Security Overview

Evidence, Not Assurance

Reported beta, not independently verified: The supplied handoff describes a local MVP with private drawing storage, signed uploads, upload completion checks by the service, file-signature validation, and authenticated short-lived downloads. These descriptions do not establish the security of a hosted service or guarantee confidentiality.

Before Sharing Sensitive Information

Confirm who the intended manufacturer is and whether you are permitted to share the material. Ask for the information your organization needs about data handling before uploading restricted drawings. If you cannot obtain the necessary assurance, do not upload the sensitive material.

Manufacturers should establish their own handling practices for downloaded drawings and agree how buyer questions will be answered. Private storage alone does not govern what happens to a file after it has been downloaded.

Known Boundaries

Verification gaps: Permissions, independent testing, compliance certifications, retention, deletion, hosting location, incident processes, and service-level commitments are not established. These docs make no claims about them.

Planned: Future API, webhook, and embedding support must not be treated as an available or security-reviewed integration surface.

Read document security, privacy, and confidentiality. For questions, use the contact supplied by your manufacturer or your existing beta onboarding contact. The marketing contact form is known to be unconnected and is not a reliable support route.