File Upload & Confidentiality Statement

Design files are often the most sensitive asset a product team has. This page sets out specifically how we handle them, rather than simply asserting that we keep them confidential.

How files are stored

• Uploads go directly into private storage, never into a publicly served directory on the web server
• No publicly accessible URL exists — nobody can reach a file by guessing a link
• Internal downloads use short-lived signed links that expire
• Transfer is encrypted over HTTPS

Who can access them

• Back-office access is granted per project: only the salesperson and engineers assigned to that enquiry can view the files
• Unassigned staff have no access by default, including other salespeople
• You may tick "restrict these files to assigned engineers only" when submitting, narrowing access further
• Export, bulk download and deletion require elevated permissions

What we record

Every view, download, export and deletion is written to an audit log with the user, timestamp, IP address and result. These logs support internal accountability, and we can provide an access record to you where necessary.

Permitted file types

For security reasons we accept engineering files only:

• 3D: STEP/STP, IGES/IGS, X_T, SLDPRT, STL, OBJ, 3MF and similar
• 2D: DWG, DXF, PDF
• Images: JPG, PNG, WEBP
• Archives: ZIP, RAR, 7Z

Executables, scripts and macro-enabled documents (.exe, .bat, .js, .docm, .xlsm and the like) are not accepted. Every upload is validated by both extension and content, and archives are scanned with limits on nesting depth.

Files are limited to 50MB each and 200MB per submission. For larger files, contact us to arrange an alternative transfer method.

How long they are kept

• Enquiry files are retained for the agreed business period, supporting quote verification and after-sales traceability
• Files attached to unsuccessful enquiries are flagged for purging after the agreed period
• Files for completed projects are retained per project record requirements, with the period set out in the contract
• You may request deletion at any time; we process it after verifying your identity and confirm the outcome

What we will not do

• We will not use your files, drawings or project information in case studies, marketing or website content without your written authorisation
• We will not use customer files for any model training
• We will not disclose file contents to unrelated third parties
• We will not move files to storage outside the agreed arrangement without telling you

Non-disclosure agreements

If you would like an NDA in place before sending files:

• Tick "this project is confidential — I would like to sign an NDA first" on the quote form
• Or contact us directly. We can provide a standard NDA, and we are equally happy to work under yours

We do not treat "NDA protected" as a marketing phrase. If one is needed, we sign it — and then we work to its terms.

Questions or requests

To request an access record, ask for files to be deleted, or raise a question about this statement, contact us using the email address on our Contact page, quoting your RFQ number so we can verify the request.

Updates to this statement will be published on this page.