Security for manufacturing data
The Security-First Operational Intelligence Layer
Our security posture is grounded in years of experience working within strictly regulated industries. Centumake holds the sensitive data that your contracting work depends on, and we built it on encryption, isolation, access controls, and continuous control monitoring. We show our status in a public trust center.
- SOC 2 Type 2 (in progress)
- US-only data hosting
- No AI training on customer data
We never use your data to train AI models. We store your data only in the United States. You can ask us to delete your data at any time.
How we protect your data
Encryption
We encrypt your data with AES-256 at rest and TLS 1.2 or later in transit.
Isolation
Your data is isolated from every other customer's data. Your files live in your organization's own storage bucket.
Access
Your admins invite each user. Permission sets control who can view, add, change, or delete data. At Centumake, only authorized staff can reach production systems. They need MFA and an encrypted connection, and all of them are US persons.
Monitoring
Vanta checks our cloud controls continuously. Amazon GuardDuty watches for threats. AWS CloudTrail records account activity.
People and policies
Our employees sign a confidentiality agreement and accept a code of conduct. We review our security policies each year. We have incident response procedures and a disaster recovery plan.
- Hosted on AWS
- Monitored by Vanta
- Amazon GuardDuty
- AWS CloudTrail
- AES-256 at rest
- TLS 1.2+ in transit
Where your data lives
We store your data only in the United States. Two deployments are available.
Standard service
AWS regions in the United States. We store your data only there.
Defense programs
AWS GovCloud (US), an isolated cloud with US-only data centers, for programs that need it. If you have ITAR or CUI data, do not upload it to the standard service. Contact us first at security@centumake.com.
Run your review
Open the trust center
See the live status of each control and the SOC 2 engagement letter. You do not need an account or an NDA.
Send us your questionnaire
Email it to security@centumake.com. We answer in writing.
Get the SOC 2 report when it is ready
The audit engagement started on October 31, 2026. Contact us if you want to know when the report is ready.
Questions from security reviews
How do you protect our proprietary manufacturing data and intellectual property?
You own your data. We isolate it from every other customer's data, and your files live in your organization's own storage bucket. We encrypt your data with AES-256 at rest and TLS 1.2 or later in transit. Only US persons at Centumake can access customer data. We never use your data to train AI models.
Do you use our data to train AI models?
No. We never use your data to train any AI model. Our AI vendors' terms exclude training on customer data. We use no consumer or free-tier AI services.
Where do you store our data, and how do you encrypt it?
We store your data only in AWS regions in the United States. We encrypt it with AES-256 at rest and TLS 1.2 or later in transit. For aerospace and defense programs that need it, we deploy in AWS GovCloud (US).
How do you manage user access, roles, and permissions?
Your admins invite each user. Users sign in with a password and optional two-factor codes. Permission sets control who can view, add, change, or delete data. At Centumake, only authorized staff can reach production systems. They need MFA and an encrypted connection.
Which security and compliance standards do you support?
SOC 2 Type 2 is in progress. The audit covers the Security criteria. The audit engagement started on October 31, 2026, and the report is not available yet. Vanta monitors our controls continuously, and our trust center shows their live status. We support AWS GovCloud (US) deployment for programs that need it. If you have ITAR or CUI data, contact us first.
How are AI findings reviewed and traced back to our documents?
Each finding cites the place in your documents where Centumake found it. A numbered pin marks that place on the PDF page or the 3D model. Your team validates or discards each finding, sets its severity, and records the reason.
What happens to our data if we stop using Centumake?
You own your data. We keep it while your account is active. You can ask us to delete it at any time. Email security@centumake.com.
Can we get your SOC 2 report?
Not yet. The engagement letter is in the trust center now. Contact us if you want to know when the report is ready.
Do you offer a private deployment?
Yes. We offer a private deployment option. Contact us at security@centumake.com for more details.
How do we report a security problem?
Email security@centumake.com.