Security & privacy

Your drawings are confidential

Each company's workspace is sealed off from every other company's: separate encrypted storage, separate keys, and server-side checks on every request. We also list what is not in place yet.

Request a demo See how it works

Encrypted at rest and in transit
Signed, expiring downloads
Full audit log

Security & privacy

Your drawings are confidential. We built it that way from day one.

Each company's workspace is sealed off from every other company's: separate encrypted storage, separate keys, and checks on the server for every request.

Encrypted at rest, per company

Files and sensitive fields are encrypted with AES-256-GCM. Each company has its own key, and each file has its own key on top of that. Each company's files sit in separate storage, with no shared paths.

Encrypted in transit

HTTPS (TLS 1.2+) with HSTS and secure, same-site session cookies. Every change request in the browser also requires an anti-forgery token.

Least-privilege roles

Client, company admin, company engineer and admin roles, enforced by the server. Your company's engineer reviews and approves jobs, and only sees companies they're assigned to. Admin access to file content requires a stated reason, and that reason is logged.

Signed, expiring downloads

Every download goes through a signed link tied to the person who requested it. Links expire in 2 minutes by default. A forwarded or altered link doesn't work.

Tamper-evident audit log

Every view, download and edit is recorded in an append-only, hash-chained log. Admins can verify the chain at any time. Each file shows its own activity history.

Nothing leaves without your say-so

No file is sent to an outside AI model or service unless your company turns external processing on. It's off by default. Logs never contain file contents or filenames.

Secure deletion and retention

Deleting a file destroys its encryption key, so the data can't be recovered. Each company sets automatic deletion after 30, 90, 180 or 365 days, or keeps files.

Isolation, tested automatically

An automated test suite tries to reach another company's files and standards through every API route, as a client, an API key and an engineer. Every attempt must fail and be logged.

Scoped API keys

Each API key belongs to one company, with explicit permissions and an expiry date, and it can be revoked. Agents get no drawing content unless your company allows it.

Privacy settings: external processing is off by default

Another company's job link: access denied, and the attempt is logged

Coming soon

We'd rather tell you now than have you find out later. These aren't in place yet:

Two-factor sign-in (MFA) and single sign-on (SSO) Coming soon
Encryption keys held in an external key-management service Coming soon
Sandboxed file converters and malware scanning of uploads Coming soon

We don't claim any third-party security certification. A written security model is available to pilot participants.

Learn more

Request a demo

Tell us a little about your shop. We're onboarding a small number of millwork and casework teams.

Thanks for your interest.

Nothing was sent or stored. Online requests open soon; a contact address will be published on this page.