--- id: "information-security-en" title: "Information Security and Customer IP Protection | Zhongde Precision" description: "Zhongde Precision protects customer drawings, technical documents and intellectual property through network isolation, encrypted storage and approval-controlled external transmission." source: "/en/about/information-security" language: "en" generated: true --- # Information Security Protection of Customer Drawings and Intellectual Property Controlled throughout file receipt, internal use and external transmission Customer drawings, 3D models, specifications, BOMs and project documents are managed as important information assets. Internal workstations cannot connect directly to external networks, and project files are stored in encrypted form. Any file sent outside the company must be reviewed, authorized and decrypted under controlled procedures. ## Key Features ### Network Isolation Internal systems separated from external networks ### Encrypted Storage Encrypted management of project files ### Authorized Decryption Approval required before external transmission ### Customer IP Protection End-to-end protection of customer data ## 01. Information Protection Scope We protect more than drawings—we protect the complete technical assets of each customer project ### Customer information enters controlled management as soon as it is received From RFQ review through manufacturing and delivery, technical, commercial, production and quality information is used under internal information-control requirements. ### Engineering Items #### Product Information 2D drawings, 3D models, BOMs and technical specifications #### Commercial Information RFQs, quotations, orders and delivery information #### Manufacturing Information Process plans, fixture documents and sample information #### Quality Information Inspection standards, measurement records and issue reports #### Intellectual Property Customer designs, product structures and non-public project information ## 02. Four-Layer Information Security Control Layered controls from internal networks to external transmission reduce information-leakage risk ### Control Items #### Internal Network Isolation Internal workstations cannot connect directly to the public internet, reducing direct transmission through websites, cloud drives, email and external applications. - Control Step: CONTROL 01 - Result: Blocks direct external transmission #### Encrypted File Storage Customer drawings and project documents are stored in encrypted form within internal systems and cannot be decrypted or transmitted without authorization. - Control Step: CONTROL 02 - Result: Restricts unauthorized access #### External Transmission Approval Any project file that must leave the company requires review and authorized decryption by the responsible company manager. - Control Step: CONTROL 03 - Result: Manager approval required #### Site and Device Management CCTV systems and internal management rules strengthen security in office, production and information-use areas. - Control Step: CONTROL 04 - Result: Key areas under controlled management ### Controlled decryption and external transmission Customer drawings, technical documents and project files cannot be transmitted outside the company without review and authorization by the responsible manager. ## 03. Digital Security Infrastructure Documents, technical data, production information and site security are managed through coordinated systems ### Digital Management System Secure · Controlled · Traceable ### Digital Systems #### Document Management System Customer files are centrally managed and stored in encrypted form to restrict unauthorized access and transmission. Centralized and encrypted file management - System Name: DMS - Introduced: Introduced in Aug. 2012 #### Technical Information Management Drawings, technical specifications and revision information are managed to reduce the use of incorrect versions. Technical document and revision control - System Name: PLM - Introduced: Introduced in Apr. 2021 #### Production Management System Order, production and delivery information is linked to support project progress and manufacturing-record management. Production, order and delivery information - System Name: ERP - Introduced: Introduced in Apr. 2021 #### CCTV Monitoring System Key office and production areas are monitored to strengthen site, equipment and information-use management. Key-area and site security - System Name: CCTV - Introduced: Introduced in May 2018 ### The systems do not operate independently Document, technical, production and site controls work together to protect customer information and support project traceability. ## 04. Controlled Customer File Workflow Clear controls are applied from file receipt through external transmission ### Process Steps #### 01. Receive Customer Files Receive customer-provided 2D drawings, 3D models, BOMs, technical specifications and project files. Information enters controlled scope #### 02. Encrypted Internal Storage Project files are stored in encrypted form within internal systems and cannot be transmitted directly outside. Files remain encrypted #### 03. Authorized Internal Use Relevant personnel use required information internally according to project needs and job responsibilities. Access based on role and project #### 04. Controlled Project Use Drawings and technical files are used only for authorized review, manufacturing, inspection and delivery activities. Used only for authorized projects #### 05. External Transmission Request When a project file must leave the company, a request must first be submitted with its intended purpose. No transmission without approval #### 06. Manager Approval and Sending After responsible-manager review and authorization, the file is decrypted under control and sent for the approved purpose. Controlled transmission after approval ### Responsible-manager authorization is required before files leave the company Without review and authorization, customer drawings, technical information and project files remain encrypted and cannot be transmitted directly outside the company. - Manager review - Authorized decryption - Transmission for approved purpose ## 05. Project Confidentiality Coordination Confirm file receipt, transfer and confidentiality requirements during the RFQ and project-launch stages Different customers and projects may require different transfer methods, contacts and confidentiality rules. Confirming these requirements before project launch helps reduce misdirected files and communication gaps. ### Engineering Items #### 01. Designated Project Contacts Define the authorized senders, recipients and project communication contacts on both sides. Reduces misdirected files and missed communication #### 02. Approved File Transfer Method When a customer specifies a transfer channel, a workable method can be confirmed before the project begins. Files follow the confirmed transfer method #### 03. Project-Code Management Non-public projects may use project codes or internal numbers to reduce exposure of sensitive product and project names. Reduces identifiable sensitive information #### 04. Additional Confidentiality Requirements Customers may specify additional requirements for file scope, recipients, transfer methods and other confidentiality matters. Requirements confirmed before project launch