Home · Security
Security
Your drawings never leave the company. Read-only by design, fully on-premise. On its own it checks the version number and, after the scheduled scan, downloads a new build (can be disabled); feedback goes out only when you click.
Worried about security? That's exactly how we built it
We know a leaked drawing is game over — we come from manufacturing too.
✓
Fully on-premise
Drawing, BOM and document files are never transmitted anywhere. No cloud
upload, no external server. Even the UI opens only on that PC (127.0.0.1).
✓
Emails carry only what changed — your company picks the mail server
If you set up your company mail server (SMTP), briefing emails carry the changed text and cropped before/after images (never the original files) to the recipients you choose — without it, Drev only writes email drafts (.eml). If you enter a public mail service (Gmail, Outlook.com, Naver…), those images pass through that provider's servers, so use your in-house mail server where drawings must stay inside (the settings screen warns you too).
✓
Read-only by construction
There is no code that modifies, moves or deletes watched files — if a write, delete or move
command ever appears in a module that opens watched files, an automated test stops the release, and a live run
checks that the watched folder's fingerprints and timestamps are unchanged after a scan.
✓
Your data stays on your PC
All history lives in a single file (state.db) in the app's data folder
(%LOCALAPPDATA%\Drev for the installer, the program folder for portable), with automatic
weekly backups. Copying the folder is your backup and migration. The mail server password
is stored encrypted with your Windows account (DPAPI). This file holds the text of watched documents and page images
used for comparison, so treat it like the drawings themselves — disk encryption (BitLocker) on the watch PC is recommended.
✓
On its own, it only checks for a new version and downloads it
It fetches one tiny version file to see if an update exists (can be
turned off); when a new version is out it downloads the program files after the scheduled scan and
replaces itself (can be turned off). Downloaded files are used only when they match the SHA-256 fingerprint in the release list,
and the version check carries the installed version number — it sends nothing else on its own. The in-app feedback form,
only when you choose to use it, sends what you typed plus the version and a few
diagnostic log lines (start/update/error; optional, off by default) — never scan results. Paths, file names,
project and drawing numbers, Rev values and error messages containing Korean text are masked; plain system errors
(e.g. "database is locked") are kept for diagnosis.