Trust Center

How we protect your data

Security is built into how TruePart works, on every plan.

• Every plan includes encrypted, private storage, isolation between customers, secure sign-in, and project deletion. Available now
• AI models never execute code: they return structured data, which is validated before use. Available now
• Geometry comes only from a typed CAD plan executed by a deterministic engine. Available now
• AI provider credentials live only behind a single provider boundary, never in CAD workers. Available now
• The public site does not expose application credentials or customer engineering data. Its contact forms post to one rate-limited endpoint that can deliver only to TruePart’s own mailboxes. Available now
• The invite-only pilot runs separately: sign-in uses a managed identity service, and each processing step runs in its own isolated function with only the permissions it needs, with drawings in private, encrypted storage reachable only through short-lived links. Available now

• Security

Your data stays yours

Here is how we handle the drawings and models you share with us.

• Customer engineering data is not used to train shared models unless you explicitly choose otherwise. Available now
• This is the default on every plan, including free use and the pilot. No plan changes it.
• Allowing training is a separate, voluntary choice that you make explicitly. It is never a condition of a price, access, a discount, or any feature. The pilot does not ask for it.
• The site is delivered through our hosting and content-delivery providers.

• Your engineering data and model training
• Privacy

Compliance status

We are building TruePart for engineering teams with demanding requirements, and we are open about where we stand today.

• TruePart does not currently hold a third-party security certification or a government authorization, and nothing on this page claims one.
• Today, TruePart does not accept export-controlled, classified, or government-security-controlled data (see the Terms).
• Classified information is prohibited and cannot be bought on any plan.
• Purchasing Regulated does not itself authorize CUI, export-controlled, classified, or other restricted data.
• Contract-aware policy and data classification Planned
• Export-control workflow Planned
• Environment authorization Planned
• Enhanced audit and evidence Planned

• Terms
• How Regulated works

Your responsibilities

Security is shared. TruePart protects the service; you decide what goes into it.

• Upload only drawings and files you have the right to share with us.
• Do not upload classified information, export-controlled technical data, or any other data that your contracts or the law do not allow you to share. TruePart is not built to hold it.
• You are responsible for complying with the export-control and sanctions laws that apply to you, your data and your users.
• Keep your sign-in details and authenticator app private. You are responsible for activity under your account.
• Review every model and file TruePart generates before you rely on it. Our verification checks the geometry against the specification you approved; it does not replace your own engineering review.

• Terms

Security reviews and agreements

For organizations that need a formal security review, an NDA or procurement support, these workflows are on our roadmap.

• Security-review support Planned
• NDA and agreement workflow Planned
• Procurement support Planned

• Trust & Legal

Report a security issue

• Found a security issue? Report it through our security page. Please do not access data that is not yours, and give us a reasonable chance to fix the issue before you disclose it publicly.

• Report a vulnerability
• Privacy questions
• Contact