Built to protect engineering IP.
Manufacturers trust us with drawings and rating data. This is how the product is built to keep them safe.
DraftA security overview document and a subprocessor list are being prepared. We do not claim any certification on this page.
Your calculations stay on the server
Rating tables and formulas are read only by server functions that return one answer at a time. A full table or formula is never sent to a browser.
Workspace isolation in the database
Every workspace's data is separated by row-level security in Postgres, so access is denied by default and enforced below the app.
Email-code sign-in
Every sign-in needs a one-time code sent to your work email. Verified sessions expire after 12 hours.
Controlled, watermarked exports
Workspace admins decide who may download sealed PDFs and generated documents. Exports carry a watermark with who, which workspace and when.
Encrypted at rest and in transit
Your files and data are encrypted in storage and over the network (TLS).
US hosting
Production data is hosted in a US region (AWS us-west-2). We add no provider that stores customer data outside the US.
AI under commercial terms
Models from US providers on paid terms that do not train on your data. Each AI job sees only its own workspace.
People approve what is published
Uploaded and AI-made content goes live only after someone in your workspace confirms it, and the system records who and when.
Audit trail
Changes in a workspace are recorded with who made them and when.