Zentri Axiom Pvt. Ltd.
Information Security & Common Data Environment (CDE) Model Governance
Document Reference: ZA-POL-SEC-2026-V1.0
Effective Date: January 1, 2026
Security Framework: ISO/IEC 27001:2022 Aligned / Autodesk Cloud Security Standards
---
1. Purpose & Guiding Principles
As a trusted partner to international developers, defense-grade facilities, mission-critical data centers (e.g., LBOM 700,000 sq.ft Data Center), and government master plans (e.g., Neom Nova Soffit & Neom 4000 KSA), Zentri Axiom maintains the highest echelon of information security.
This policy establishes technical, procedural, and administrative safeguards to protect client Building Information Models (BIM), 3D point clouds, architectural designs, and proprietary CAD assets against unauthorized access, loss, or exfiltration.
---
2. Common Data Environment (CDE) Architecture & Access Controls
1. Approved Cloud Infrastructure:
- Primary CDE collaboration occurs solely within authorized enterprise tenancies: Autodesk Construction Cloud (ACC) and Autodesk BIM 360.
- Direct model synchronization via Revit Cloud Worksharing is governed by mandatory Multi-Factor Authentication (MFA).
2. Principle of Least Privilege (PoLP):
- Access to project models is restricted strictly to vetted project modelers, discipline leads, and project coordinators.
- External sharing links are time-limited, password-protected, and set to read-only or view-only mode unless file upload rights are explicitly contracted.
3. Air-Gapped & Secure Local Workstations:
- CAD and BIM production workstations operate in a secure network environment equipped with endpoint detection and response (EDR) software.
- USB mass storage ports on production machines are strictly managed to prevent unapproved offline data extraction.
---
3. Non-Disclosure & Model Confidentiality Guarantees
Every employee, contractor, and technical specialist at Zentri Axiom executes a legally binding Non-Disclosure Agreement (NDA) containing:
- Permanent confidentiality obligations extending beyond termination of employment or project closure.
- Explicit prohibitions on uploading client proprietary families, geometry, or site coordinates to public repositories, third-party generative AI platforms, or unvetted cloud engines.
- Strict intellectual property assignment transferring all project-specific modifications directly to the client.
---
4. Laser Scan (Point Cloud) Data Protection
Laser scans of existing industrial plants, data halls, corporate campuses, or sensitive infrastructure contain millimetric geometric telemetry of high sensitivity:
- Point-cloud files (`.rcp`, `.rcs`, `.e57`, `.las`) are stored in encrypted volumes with restricted read access.
- Any classified site features (e.g., defense installations, secure vault partitions) are redacted or sanitized in accordance with project-specific security annexes.
---
5. Incident Response & Disaster Recovery
- Automated Backup Strategy: High-frequency snapshot backups are taken every 4 hours for active work-in-progress models, with daily off-site encrypted archival.
- Incident Escalation: In the unlikely event of a suspected security anomaly or credential compromise, the Security Officer notifies affected clients within twenty-four (24) hours with a containment and forensic remediation report.
Approved by:
Chief Information Security Officer & Managing Director
Zentri Axiom Pvt. Ltd.