Skip to content
ASdrawn
Sign up

Security & data handling

Where does my drawing go?

The short answer: the drawing PDF stays on your device, its page images are read in memory and not stored by us, and nothing is used to train AI models. The privacy policy is the full account: what we collect, who receives it, how long it is kept and your rights.

In plain statements

What happens to a drawing.

  1. 01

    Your drawing stays on your device.

    The drawing file itself stays on your network (the AI reads images of its pages, as described above). When you open a drawing that isn't on the device in front of you, ASdrawn gets it from your organisation's own drawing server if you run one, or directly from another of your team's devices that has it, with ASdrawn open, on the same local network. That transfer is a direct, encrypted connection between the two devices with no relay or outside server; the file is checked against the run's fingerprint before it is used, and it never passes through ASdrawn or any third party. Only members who can open the run can receive it, and anyone can turn sharing off for their device in Settings. We receive the PDF only if you attach it to a support ticket.

  2. 02

    Page images are read, not stored by us.

    During analysis, images of the drawing's pages travel over an encrypted connection and are processed in memory; we never write them to our storage. Drawing page images are read by Google's Gemini Enterprise Agent Platform, and the text on them is recognised by Google Document AI. Google does not use data sent through the service to train its models.

  3. 03

    Only the results are saved.

    Your account keeps the extracted characteristics and workbook data, the drawing's file name and the text recognised on its pages. Manuals you add to Knowledge are different: they are stored, so answers can open the page they quote.

  4. 04

    Where it is processed and stored.

    Your data is stored in the United States and processed in Australia and the United States; under the default Global AI setting, Google may process a request in any of its regions. We record where each analysis run was processed.

  5. 05

    Traffic is encrypted and access is restricted.

    All traffic is encrypted in transit (TLS). Access to production systems is restricted and credentialed, secrets are managed outside source code, and administrative access to customer data is limited to what support requires. If a data breach affects you, we will notify you without undue delay, and under the Notifiable Data Breaches scheme where it applies. ASdrawn does not yet hold a formal third-party security certification; this page will say so plainly as that changes.

  6. 06

    The demo never sees your data.

    It runs on a drawing we own, with no upload and no file picker. The live demo is the trial: try the editor on a real run, with no account. Nothing you do is saved; data exports need an account.

  7. 07

    A person signs off.

    ASdrawn is not a certified measurement device. Every output sits beside its source callout for a qualified person to check before it is used in any inspection, certification or delivery decision.

Processing location

Where your drawings are processed.

Each workspace chooses where AI reads its drawings. The workspace owner or an admin sets it in ASdrawn's workspace settings, and it applies to runs started after the change.

  • Page images are read by Google's Gemini Enterprise Agent Platform at the chosen location, and the text on them is recognised by Google Document AI at the location listed below.
  • On the way, page images pass through our own service in Sydney, Australia, over an encrypted connection; they are not stored by us.
  • Extracted results are stored in the United States, whichever location is chosen.
  • We record where each analysis run was processed.
  1. 01

    Global

    Google may process a request in any of its regions. Text recognition runs in the United States. The best availability, and repeated work is reused across requests, so it costs least.

  2. 02

    United States

    Google commits to keep storage and processing for the AI model ASdrawn uses in the United States. One exception: for Knowledge, manual passages and the questions used to search them are processed in a single Google region in the United States, which that commitment does not cover. Text recognition runs in the United States. Costs 10% more than Global.

  3. 03

    Australia (Sydney)

    Google serves the AI model ASdrawn uses from Sydney today but makes no residency commitment for it there. Processing is expected to stay in Sydney, not guaranteed; if Google stops serving the model there, runs fail rather than move elsewhere. Text recognition runs in Sydney, Australia. Costs 10% more than Global, and more again because repeated work cannot be reused there.

Choose United States if you need a contractual residency commitment from Google.

Controlled data

What not to upload

Do not upload controlled technical data. That covers:

  • anything subject to the US International Traffic in Arms Regulations (ITAR)
  • anything controlled under the US Export Administration Regulations (EAR) other than EAR99
  • anything on Australia's Defence and Strategic Goods List (DSGL)
  • Controlled Unclassified Information (CUI)
  • drawings whose distribution statement limits them to government or defence recipients

ASdrawn is not built or certified for controlled data. It has no FedRAMP authorisation or CMMC certification, it is not registered under ITAR, and its staff are not limited to US persons. The app asks you to confirm this on every upload path: drawings, manuals, control-screen photos and support attachments. If you are not sure whether a file is controlled, do not upload it. We cannot accept controlled files under any arrangement.

Questions

Still have a security question?

The full detail is in the privacy policy. The full list of our service providers is available on request from support@asdrawn.com. The same address answers anything else a security or compliance review needs.

Matches the privacy policy of

Every statement on this page comes from the privacy policy of 2 October 2026, which is the full and authoritative account.