Session Timeout Window
🕐 Read time: 2 min
Written By Clark Yuan
Last updated 4 days ago
Overview
If you have been working in Stitch3D and returned to find yourself logged out, you have encountered the session timeout. Your session automatically ends after 30 minutes of inactivity. We know this can be inconvenient, especially during long review sessions or when stepping away briefly, so this article explains why it exists and what to expect.
Why Stitch3D enforces a session timeout
Stitch3D is ISO 27001 certified, an internationally recognized standard for information security management. One of the controls required under ISO 27001 — specifically Annex A, control A.9.4.2 — mandates that idle sessions are terminated after a defined period of inactivity.
This is not a box-checking exercise. Session timeout enforcement is a real control that prevents unauthorized access when a user steps away or forgets to disconnect. Attackers can exploit abandoned sessions in minutes; timely termination of idle sessions reduces exposure to risks like data leaks and privilege misuse.
In plain terms: your Stitch3D account contains sensitive spatial data, project files, and client deliverables. If you walk away from an open browser session (e.g., on a shared computer, in a site office, or at a conference) an automatic logout ensures that no one else can access your account or your clients' data in your absence.
What counts as inactivity
Your session timer resets whenever you are actively using Stitch3D. This means not navigating, uploading, opening a Project, or interacting with the Viewer. The 30-minute clock starts only when there is no activity detected.
What happens when your session times out
You are automatically logged out of Stitch3D
Any unsaved work in progress — such as an annotation you were mid-way through naming — may not be preserved
You will be redirected to the login screen
Log back in with your email and password to resume where you left off
💡 Tip: If you are in the middle of a long annotation or review session, save your work periodically and keep the tab active. Any interaction with the platform — scrolling the Viewer, clicking a panel — resets the inactivity timer.
ℹ️ Note: The session timeout applies to your Stitch3D account session only. Anyone viewing your Project via a public share link or QR code is not affected — their access is governed by the link's permission settings and expiration date, not your session.
Related articles
Understanding the Stitch3D Trust Center
What does Stitch3D do with my data?