Updated 13 November 2026
Security
Data center campus models are sensitive. The safest copy is the one that never leaves your computer, so that is how Undersite works by default.
Models stay where they are opened
The app opens, converts and checks models in your browser. Nothing is uploaded to us to be processed. Models, conflicts and settings are kept in the browser's own storage on that computer.
Shared links are locked before they leave
When you share a project to read, it is encrypted in your browser with AES-256-GCM, using a key made from your passcode (PBKDF2 with SHA-256). Only the locked files are stored, in our cloud storage in the eastern United States. We never see the passcode, so we cannot open what you share. Stopping a share deletes its files.
Where we host
| Provider | What for | Assurance |
|---|---|---|
| Hosting and cloud storage | The site, the app, shared projects, upload links, email forwarding | SOC 2 Type II, ISO 27001 |
| Database | Sign-in and team projects, eastern United States | SOC 2 Type II |
Every connection uses HTTPS. Database access is closed by default: every table has row level security, and the public key of the site can only add a request.
Files you send us for a review
- Sent through your file share or CDE, or a private upload link from us that takes files for seven days. Files sent that way wait, encrypted at rest, in our cloud storage in the eastern United States until we download them; we delete them there once we have them, and at the latest seven days after the link closes.
- Worked on only on encrypted machines with multi-factor sign-in. Never passed to anyone else, never used for anything but your project.
- Results come back as a report and a read-only link locked with your own passcode.
- Your files and our working copies are deleted within seven days of the report; the read-only link after 90 days or when you ask. We confirm it in writing.
- For ongoing coordination: kept for the length of the contract, deleted within 30 days after it ends.
Paperwork
We sign your NDA and data processing agreement, and answer your security questionnaire, usually within five working days. Undersite does not hold its own SOC 2 report yet; if your procurement needs one, tell us at the start so we can agree what works for your review.
Reporting a problem
If you find a security problem in the site or the app, write to hello@undersite.app. We answer within one working day.