Documentation/Security
Files and security
Rules written into the product, not into the small print.
- CAD files from quotes that never became orders are deleted automatically after 90 days. A quote you delete in the panel goes to Trash and disappears with its file after 30 days.
- Files serve the pricing of your part and the check that the engine read it correctly and that its price matches the one you approved. We pass them to no external artificial-intelligence provider and to nobody else. All processing happens on our own servers.
- On our side, files are reachable only by named, authorised people: to handle a ticket, diagnose a fault, or check that the engine read a part and priced it correctly. All of that serves running and improving the platform only, and the Terms forbid us to use your files to manufacture parts or to compete with you. Accounts carry two-factor authentication, and entry into a shop's account is recorded.
- Files are encrypted even while they simply sit on disk (AES-256). The key stays with us alone - the company providing our storage does not hold it, so it cannot read your file even with physical access. Your browser never receives the address of the file in the store: downloads go through our API, over a one-time link valid for 15 minutes.
- Contact details from orders - name, e-mail, phone, delivery address and notes - are encrypted inside the database itself, with a key the database never sees. A copy of the database on its own therefore tells nobody who ordered what from you.
- You can embed the widget only on domains you list yourself - that guards against it being embedded somewhere by accident, not against deliberate misuse. What protects you from the cost of mass uploads is the daily quote limit and the rate limits, which hold whatever the request claims about its origin.
- Database backups are taken daily, encrypted while still on the server, and we periodically check that they actually restore - because a backup nobody has restored is just a file.
- Data is stored in the European Union, in line with the GDPR.
- By default no price reaches a customer until you have approved it.
Got a question the documentation does not answer? Write to contact@metronq.com or use the Help and guides tab in the panel: tickets go straight to the people building this product.