SECURITY

CAD files are sensitive.

Designed to comply with most security requirements.

01 Infrastructure

  • Single-region GCP

    All data resides in Google's us-central1, defined in Terraform.

  • Encrypted

    TLS 1.3 in transit, AES-256 at rest.

  • Locked Down

    Geometry workers run on read only filesystems with network access restricted to only internal routes.

  • No third-party kernels

    No Parasolid, ACIS, or licensed code, and tight control of the geometry stack.

  • Minimal third-party provider use

    The only external provider is Sendgrid for sending transactional emails.

02 Data Retention

  • 90-day auto-deletion

    Automatic retention policies for files, toolpaths, and messages remove everything after 90 days.

  • Deletion on request

    Email [email protected] for deletion of models added to our test corpus with "help improve NullCAM" reports.

  • Training data

    Geometry may be used for training during the 90-day retention window. Opt in to "Help improve NullCAM" to contribute to our permanent corpus.

03 SOC2 Type II

SOC2 Type II certification is planned, if you need this sign up for a notification when that ships.

Current Security Status

Beta
Product Stage
GCP
Infrastructure
90 days
Data Retention
Planned
SOC2 Type II