# Security and data handling: what happens to your CAD files

> What CADABRA does with your CAD data: training is on by default on self-serve plans with a one-setting opt-out, and Enterprise can run zero-retention.

URL: https://cadabrai.com/security/
Updated: 2026-08-15

---

# What happens to your CAD data.

What happens to your CAD data, per the EULA and the privacy policy.

## Training is on by default on self-serve plans, and you can turn it off.

On **Free, Student, and Professional**, the CAD geometry, prompts, and metadata you submit may be used to operate, maintain, and improve CADABRA and its AI models. That is what the [EULA](https://cadabrai.com/eula/) and the [privacy policy](https://cadabrai.com/privacy/) say, and it is what actually happens.

One setting in the dashboard stops it. Turning it on means your designs, prompts, and files are processed only to answer the request in front of them and are kept on no CADABRA server. It is included with every plan.

On **Enterprise**, zero-retention handling is configured as part of the agreement.

## What applies to which plan.

|  | Free, Student, Professional | Enterprise |
| --- | --- | --- |
| Used to improve and train models | Yes, by default | No, under a zero-retention agreement |
| Opt out | One setting in the dashboard | Configured for the organization |
| Content retained | Yes, unless you opt out | Ephemeral under zero retention |
| Sold to third parties | Never | Never |
| Isolation of indexed content | Yes | Yes |

## The controls that apply on every plan.

### Isolation

Indexed CAD content is filtered to the account that wrote it.

### Encryption

Encrypted in transit. Chats, attachments, standards files and feedback are encrypted at rest under keys held in a hardware-backed vault, separate from the data.

### Minimum context

Only the context a given prompt needs is loaded at run time, rather than the whole library.

### Access control

Single sign-on on Enterprise, role-based access, and a 90-day expiry on operational logs.

### Zero retention

Available on Enterprise, configured per organization. See [Enterprise](https://cadabrai.com/solutions-enterprise/).

## What leaves the workstation, and when.

On the standard plans CADABRA needs connectivity to reach its processing environment, so it does not run fully offline. What it sends is the context a prompt requires, not a wholesale upload of your PDM vault.

Zero-retention handling and encryption at rest are the controls available for sensitive work. Model inference does require sending the prompt and the assembled model context off the workstation, so if your requirements rule that out entirely, [tell us](https://cadabrai.com/contact/) early and we will say plainly whether we can meet them.

## Read the binding documents.

This page is a summary. The [privacy policy](https://cadabrai.com/privacy/) and the [EULA](https://cadabrai.com/eula/) are the agreements, and they govern where this page differs.

The privacy policy also names the sub-processors involved in operating the service and what each receives. If you are running a vendor review, read §3 of the privacy policy first and then [send us your questionnaire](https://cadabrai.com/contact/).

## Reporting a vulnerability.

Security reports go to [team@cadabrai.com](mailto:team@cadabrai.com), also published at [/.well-known/security.txt](https://cadabrai.com/.well-known/security.txt).

## Security, answered.

### Do you train on my CAD files?

By default on Free, Student, and Professional, yes: the EULA and privacy policy state that CAD geometry, prompts, and metadata may be used to operate, maintain, and improve CADABRA and its AI models. You can stop it at any time with the data setting in your dashboard, which takes effect from the moment you turn it on rather than retroactively. On Enterprise, zero-retention handling is configured as part of the agreement.

### How do I stop CADABRA training on my designs?

Turn on the data setting in the dashboard under Preferences. It processes your designs, prompts, and files only to answer the request in front of it, keeps none of them on CADABRA’s servers, and excludes them from training. The trade-off is that it also turns off cloud chat history and cross-device recall, because both are stored data. It is included with every plan.

### Is CADABRA secure for company data?

CAD content is encrypted in transit. Chats, attachments, standards files and feedback are encrypted at rest under keys held in a hardware-backed vault, separate from the data. Indexed content is filtered to the account that wrote it, and only the context a given prompt needs is loaded at runtime. CADABRA does not sell customer data. Enterprise plans support single sign-on and zero-retention handling. On self-serve plans, check the training setting described below.

### Does CADABRA work without an internet connection?

No. CADABRA reaches its AI processing environment over the network, and CAD data is encrypted in transit. Model inference requires sending the prompt and the assembled model context, so there is no offline mode. If that rules CADABRA out for your work, contact us before you evaluate it.

### Does CADABRA integrate with PLM or PDM?

Not today. There is no PLM or PDM connector. CADABRA works on the files you have open and the drawing standards you upload, and your PDM rules around those files keep applying. If a connector matters to your team, tell us which system.

### Do I need my own SOLIDWORKS license?

Yes. CADABRA is an add-in, not a CAD system. You keep your existing SOLIDWORKS license, files, libraries, and PDM, and CADABRA works inside them.

## Send us your security questionnaire.

Security, licensing, and deployment questions.

## Keep reading

- [Data HandlingTraining defaults, the opt-out, isolation, and deployment options.](https://cadabrai.com/docs/security/data-handling/)
- [EnterpriseYour drawing standards, applied by every engineer, every time.](https://cadabrai.com/solutions-enterprise/)
- [PrivacyWhat we collect, what we do not, and your choices.](https://cadabrai.com/privacy/)