Info

File Privacy

JOS Machines values your privacy and security. You always own your designs, and we only use them to quote and build your parts. Your files are never sold or shared outside of JOS Machines. The price is worked out in your browser. When you are signed in, each CAD file is uploaded straight to private Amazon S3 as soon as you add it, and the copy in the browser is dropped. The saved quote keeps a reference to that file. Placing the order uses that same file, so it is stored once. Deleting a quote you did not order deletes the file. Files are encrypted at rest with AES-256 using a customer-managed AWS KMS key that belongs to JOS Machines. You can view your own file in My Account. Staff can download it to print the part.

While you get a quote

• Your original file on your computer is not changed. The price is calculated in your browser from the part you added.
• When you are signed in, the CAD file goes from your browser straight to private S3 storage as soon as you add it. It does not pass through the website host, and it is not uploaded again when you change material, infill, color, or quantity.
• After that upload finishes, the working copy in the browser is dropped. My Account draws the 3D view from a simplified mesh saved with the quote. Continuing the quote opens the CAD file over a short-lived link.
• Deleting a quote you did not order deletes the file. Placing the order keeps that same file, stored once, and then removes the saved quote. Removing the quote after you order does not delete the file, because the order is what keeps it.
• If you are not signed in yet, the site keeps an encrypted working copy in the browser until you sign in. That copy is encrypted with AES-256-GCM and checked with SHA-256, then uploaded and dropped.
• Signing out or clearing your browser's site data removes what the site has saved on that device. It does not delete a file already stored for a saved quote or an order.

When you place an order

• The website, the order API, and the file upload all use HTTPS.
• If you were signed in, the order uses the CAD file already in private S3. It is not uploaded again and it is not stored a second time.
• If the file is still only on your device, it is uploaded when you place the order, from your browser straight to Amazon S3. It does not pass through the website host.
• Small preview images for My Account are uploaded at checkout. The CAD file and those previews stay in private storage.
• The storage refuses any connection that is not encrypted, and it refuses TLS older than 1.2.
• Each file, preview image, and order record is encrypted at rest with AES-256-GCM through AWS KMS. Uploads that are not encrypted with our KMS key are rejected.
• The key is a customer-managed key for JOS Machines, with yearly rotation. Public access to the bucket is blocked.
• You can open your file in My Account to see the 3D view. That uses a link that expires after a few minutes. Staff use a similar expiring link to download the file for production.
• We keep your files so we can print your parts. After an order has shipped, you can delete them from My Account, and we can delete them when you ask.

Your account

• Your account, saved quotes, quote files, and order history are kept in the same private, KMS-encrypted AWS storage, so you can sign in on any device.
• Your password is never stored. We keep only a salted scrypt hash of it, which cannot be turned back into the password.
• Only you can see your orders and quotes in My Account. Signing in again is needed after 30 days, or right away on other devices when you change your password.

Export controlled and CUI parts

We do not currently take parts subject to ITAR, EAR, Dual-Use, Military/Defense, or Firearms regulations, or parts considered Controlled Unclassified Information (CUI).

The standards we use

Stored files are protected by Amazon Web Services. When a file is still only in your browser, that working copy uses the standards published by NIST:

• AWS Key Management Service (KMS), including a customer-managed key with yearly rotation
• Amazon S3 encryption with AWS KMS keys
• Amazon S3 transport security (HTTPS, TLS 1.2 or newer)
• NIST FIPS 197: Advanced Encryption Standard (AES)
• NIST SP 800-38D: Galois/Counter Mode (GCM), the AES mode used for the browser working copy
• NIST FIPS 180-4: Secure Hash Standard (SHA-256)
• W3C Web Cryptography API, the browser encryption standard