Security and Privacy Centre

The one-minute summary

In Confidential Quote mode your model file never leaves your device during quoting. Measurements are computed in your browser; only the numbers needed for pricing reach the server.This item is a security claim and is verified by an automated test. Claim code: I-K1-01

AI that reads your model, mesh or drawing is disabled under all conditions. Third-party AI is not part of this programme.This item is a security claim and is verified by an automated test. Claim code: I-AI-01

Your production file is transferred only after you place an order, with a separate and explicit consent.This item is a security claim and is verified by an automated test. Claim code: I-SIPARIS-01

Your organisation can set the privacy decision. If it requires Confidential Mode, no user can weaken it.This item is a security claim and is verified by an automated test. Claim code: I-POLITIKA-01

How data flows in Confidential Mode

1. You choose a file. It stays in your browser's memory; it is not uploaded anywhere and is not stored persistently in your browser.

2. Your browser analyses the model in the background: volume, surface area, bounding box, triangle counts and basic manufacturability indicators.

3. You see the complete list before it is sent. The list on the "see the data that will be sent" screen is generated from the very object that goes to the server.This item is a security claim and is verified by an automated test. Claim code: I-K2-01

4. The server produces a price from these numbers. Because the model file never reaches the server, it also appears in no log, database, disk or CRM record.This item is a security claim and is verified by an automated test. Claim code: I-K2-03

5. If something goes wrong the operation stops. When Confidential Mode cannot be resolved there is no silent fallback to Standard; you are told what happened and what your options are.This item is a security claim and is verified by an automated test. Claim code: I-FAILCLOSED-01

What is shared and what is not

In Confidential Mode the server receives: volume (mm3), surface area (mm2), bounding box (x/y/z), vertex and face counts, watertightness, counts of boundary / non-manifold edges and degenerate faces, overhang area, aspect ratio, file type (stl/obj) and a file-size bucket.

What does NOT reach the server: the original CAD or mesh file, its file name, any image or preview of the model, technical drawings and the model's topology. These also do not enter logs, analytics, error tracking or CRM records.This item is a security claim and is verified by an automated test. Claim code: I-K1-02

An honest limit: derived measurements are a coarse fingerprint. Volume and bounding box carry information about the part's size. Confidential Mode does not remove this and does not claim to.

Parts processed in Confidential Mode appear in quotes and documents under a label such as confidential-xxxxxxxx. Your original file name is not kept on the server, so it does not appear in the document either.

What does AI see?

AI capabilities that read your model are disabled across the product and are not shown as switchable in the interface. This is a product security rule, not a setting.This item is a security claim and is verified by an automated test. Claim code: I-AI-01

The AI calculations that do run use measurement and production data only: price suggestion, lead-time estimation, comparison with similar jobs. They do not see the model.

No data is sent to third-party AI providers. This programme does not include third-party AI.This item is a security claim and is verified by an automated test. Claim code: I-AI-02

Who decides?

The decision resolves across five layers: the platform security boundary, the tenant policy, the customer-account policy, the channel policy (registered or anonymous) and your own choice. A lower layer can never open what a higher layer forbids; it may choose something more protective.This item is a security claim and is verified by an automated test. Claim code: I-POLITIKA-01

Every quote carries an immutable record of the decision in force at that moment. Even if settings change later, an existing quote's record does not.This item is a security claim and is verified by an automated test. Claim code: I-POLITIKA-02

If a quote that began anonymously is linked to a stricter customer account, the policy tightens automatically. A previously uploaded file is never relabelled as confidential.This item is a security claim and is verified by an automated test. Claim code: I-POLITIKA-04

A later, looser setting cannot revoke a privacy commitment already made.This item is a security claim and is verified by an automated test. Claim code: I-POLITIKA-03

Orders and the production file

Confidential Mode solves the quoting stage, not production. If you place an order, the real file is required for manufacturing.

Your order waits until the production file is delivered. The file is accepted only when an order record and a separate explicit consent exist; the consent is short-lived.This item is a security claim and is verified by an automated test. Claim code: I-SIPARIS-01

You may decline to hand over the file. The order then stays pending, production is not considered started, and your decision is kept as an immutable record.This item is a security claim and is verified by an automated test. Claim code: I-SIPARIS-02

I consent to delivering the production file now. The file will be used to manufacture this order, stored encrypted, and destroyed when its retention period ends. My consent is short-lived; if it expires I will need to consent again.This item is a security claim and is verified by an automated test. Claim code: I-SIPARIS-01

Retention and deletion

In Confidential Mode there is no file to retain during quoting; retention applies only to the production file delivered after an order.

Delivered files are stored encrypted and their file names carry no information. The file of an order still in progress is not destroyed even if a retention period elapses.

Quote records and measurements remain after a file is destroyed: your quote history and price auditing depend on them.

Technical security

Each tenant runs in its own database. One tenant's policy, quote and files are invisible to another; unauthorised access returns 404, so the existence of a record does not leak either.

A strict Content Security Policy applies to confidential quoting pages: the page may only make requests to its own origin and no third-party script can load.This item is a security claim and is verified by an automated test. Claim code: I-K1-02

Each of our security claims is bound to automated tests. If a test is deleted or disabled, the release gate closes.

An honest limit: "it runs in your browser" is a claim you cannot easily verify on your own. You can inspect the requests yourself in your browser's network tab; an independent security review does not replace that, it adds to it.

Frequently asked

Which file formats work in Confidential Mode?

Currently STL, OBJ, PLY and 3MF. In-browser analysis is not yet supported for STEP and IGES; those formats use Standard Mode. If your organisation requires Confidential Mode, you need to export the file in one of those four formats.

Is the price different in Confidential Mode?

No. The in-browser analysis is compared against the server analysis on golden files; volume and surface differ by less than 1%, and the bounding box by less than 0.05 mm. Some advanced analyses such as wall thickness do not run in Confidential Mode, and the quote says so.

Does Confidential Mode replace an on-premise installation?

No. With an on-premise installation the server is yours and you can verify the claims yourself. Confidential Mode is the strongest answer for users quoting over the public web; they answer different needs.

Can I change the mode myself?

Yes, if your organisation has not required a mode you can choose it at the start of a quote. If it is required, the interface shows the reason for the lock and who set it.

Sub-processors and contact

For the quoting stage in Confidential Mode, no model data is transferred to any sub-processor. The list of sub-processors at the production stage depends on the tenant (the manufacturer) and is part of your agreement.

For questions about this document and for security reports, use the manufacturer's contact channel. Security vulnerability reports are treated as a priority.