Data residency and deployment
Design Forge is offered as a hosted SaaS in U.S. regions by default. Customers in regulated programs (defense, aerospace, automotive radar) can request a single-tenant or on-premises deployment with no outbound telemetry.
The desktop capture agent is air-gap friendly. It buffers events locally and only transmits when an authenticated, encrypted channel is available to your tenant.
Encryption
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Project keys are tenant-isolated.
Customer-managed keys (CMK) are available on Team & Enterprise tiers.
Access controls
Role-based access control with project-scoped permissions. SSO via SAML 2.0 and OIDC available on Team & Enterprise tiers.
All administrative actions are recorded in an audit log that can be exported to your SIEM.
What we capture — and what we don’t
Design Forge captures HFSS design events (variable changes, simulation runs, model edits) and associated metadata. We do not capture file contents, mesh data, or solver output unless you explicitly enable it.
You can configure project-level redaction rules so sensitive parameter names never leave your environment.
Compliance posture
SOC 2 Type II audit is in progress in 2026. ISO 27001 roadmap follows.
For ITAR / EAR-regulated programs we recommend the on-premises deployment. Reach out for our security questionnaire response pack and architecture diagrams under NDA.
Reporting a vulnerability
If you believe you’ve found a security issue, please email contact@designforgeai.com with details. We acknowledge reports within 2 business days and coordinate disclosure with you before publishing any fix notes.
Talk to us
Need our security questionnaire response, an architecture diagram, or to discuss an on-premises deployment?
Book a security review