Understanding the Stitch3D Trust Center
🕐 Read time: 4 min
Written By Clark Yuan
Last updated 19 days ago
Overview
The Stitch3D Trust Center is a single, public destination where you can review our security posture, download compliance certifications, and verify that your Project data is handled to the highest industry standards. Whether you're a project manager sharing geospatial data with clients, a procurement team evaluating Stitch3D, or an IT administrator completing a vendor risk assessment, the Trust Center gives you the documentation you need without having to contact our team.
🔗 Visit the Trust Center: trust.stitch3d.io
What is SOC 2?
SOC 2 (System and Organization Controls 2) is an independent security audit framework established by the American Institute of Certified Public Accountants (AICPA). It evaluates whether a company's systems and controls reliably protect customer data across five Trust Service Criteria: Security, Availability, Processing Integrity, Confidentiality, and Privacy.
A SOC 2 certification is not self-assessed; it is issued by an independent third-party auditor after a rigorous review of a company's actual controls, processes, and infrastructure.
There are two types:
ℹ️ Note: SOC 2 Type 2 is widely considered the gold standard for cloud software security compliance. It is required by many enterprise procurement and legal teams before approving a SaaS vendor.
Stitch3D's certifications
Stitch3D has achieved both SOC 2 Type 1 and SOC 2 Type 2 certification, meaning our security controls have not only been designed correctly, but have been independently verified to operate effectively and consistently over time.
What this means for you:
Your point cloud and imagery data, project files, and account information are stored and handled under independently audited security controls
Stitch3D has passed a continuous audit — not just a one-time snapshot — demonstrating sustained operational security
You can share Stitch3D's compliance documentation directly with your own clients, IT teams, or legal departments to satisfy vendor security requirements
💡 Tip: If your organization requires a vendor security review before approving new software, our SOC 2 Type 2 report is the primary document to request. You can download it directly from trust.stitch3d.io.
What's in the Trust Center
The Stitch3D Trust Center is hosted on Vanta, a leading compliance automation platform used by thousands of SaaS companies. From the Trust Center you can access:
SOC 2 Type 1 report — our point-in-time security design audit
SOC 2 Type 2 report — our continuous operational security audit
Security overview — a summary of the controls, infrastructure, and practices Stitch3D uses to protect your data
Subprocessors list — the third-party services Stitch3D uses as part of delivering the platform (e.g. cloud infrastructure, storage)
Privacy policy and terms of service — links to our current legal documentation
ℹ️ Note: Some documents in the Trust Center require you to submit a request with your work email before downloading. This is standard practice for SOC 2 reports — the request takes less than a minute and is approved promptly.
Who should use the Trust Center
Frequently asked questions
Does Stitch3D store my Project data securely? Yes. Stitch3D's SOC 2 Type 2 certification covers the controls protecting all data stored and processed on the platform, including uploaded files. The certification is verified annually by an independent auditor.
Can I share Stitch3D's security documentation with my own clients? Yes. The Trust Center is publicly accessible. You can share trust.stitch3d.io directly with any client or stakeholder who needs to verify Stitch3D's security posture.
What cloud infrastructure does Stitch3D use? For details on our infrastructure and third-party subprocessors, visit the Trust Center and review the subprocessors list.
How do I request access? Select the Report you need, fill in your contact information, click the Request access button, and our team will be in touch with you.