CAD files are sensitive.

• ✓
  Single-region GCP

  All data resides in Google's us-central1, defined in Terraform.

• ✓
  Encrypted

  TLS 1.3 in transit, AES-256 at rest.

• ✓
  Locked Down

  Geometry workers run on read only filesystems with network access restricted to only internal routes.

• ✓
  No third-party kernels

  No Parasolid, ACIS, or licensed code, and tight control of the geometry stack.

• ✓
  Minimal third-party provider use

  The only external provider is Sendgrid for sending transactional emails.

• ✓
  90-day auto-deletion

  Automatic retention policies for files, toolpaths, and messages remove everything after 90 days. This is enforced by storage lifecycle rules on every bucket we write to, not by application code remembering to run.

• ✓
  Anonymous access links: 1 hour

  If you upload without an account, the 90-day rule above applies to your upload too. What is shorter is your access: an anonymous result link works for 1 hour after submission and then stops opening. Save your G-code before then, or make an account.

• ✓
  Deletion on request

  Email [email protected] for deletion of models added to our test corpus with "help improve NullCAM" reports.

• ✓
  Training data

  Geometry may be used to improve our algorithms during the 90-day retention window. Nothing is kept past it.

SOC2 Type II certification is planned. If you need it, email [email protected] and we'll tell you when it ships.