Entrust3D

Commitments

What we never do

A protection company is handed a great deal of trust and a great many temptations. These are the ones we have designed ourselves out of, so that changing our minds later would mean rebuilding the system rather than editing a page.

No DRM. Ever.

Nothing we do decides whether a file can be opened, printed or manufactured. No phoning home, no licence checks, no expiry. The mark is a serial number, not a lock — and a serial number keeps working in twenty years, offline, in software we have never heard of.

Protection is never withheld to sell you an upgrade.

A free account's models are marked, tracked, registered and recorded exactly like a paid one's. If a copy is found you are told, at no charge, always. What a paid plan buys is the detail: where, when, which sale, and the packet. We will not hold your protection hostage to a price list.

We never hold your customers' details.

Your store sends an opaque reference for each sale. The mapping from that reference to a person stays in your records. We cannot identify your buyers, because we never receive the means to.

No accusation is ever automated.

Every notice passes a person's review and a person's click. No mass campaigns, no letter mills, and no cut of anything you recover — a provider paid out of outcomes has an interest in accusing people, and we would rather not have that interest.

No public way to test a file.

Reading a mark requires what we stored when we embedded it. We publish no detector, no lookup that reveals whether a model is covered, and no way to tell that an account is a customer. Anything that lets a person check whether a file is protected is a tool for deciding whether it is safe to steal it.

No enumeration of the registry.

Identifying what a file matches is rate-limited and logged, and bulk probing becomes a signal about the prober rather than an answer. A registry that will tell anybody what it knows, on demand, is a shopping list.

Custody

What we hold, and how

Your masters
Encrypted at rest under a key belonging to your account alone, and never published, shared or used to render anything public.
Shape descriptors
Numbers computed from the geometry, used for matching. They cannot be turned back into your model.
Mark templates
What makes a mark readable later. Held on our side; that is the whole security boundary, and it is why there is no offline detector.
Sale references
Opaque identifiers you send us. No names, no email addresses, no payment details — we could not identify your buyers if we were asked to.
The record
Registrations, sightings, claims and decisions are append-only: history is never rewritten, and a correction is a new entry that supersedes an old one. Evidence that can be quietly edited is not evidence.
When you close your account
The keys protecting your content are destroyed, which makes the content unreadable to us and to anyone else. Ledger entries that other people's evidence depends on remain, and can no longer be linked to a buyer by anyone, including us.

Where we stop

The limits of what we will assert

We are a notary and an evidence custodian, not a court and not a bounty hunter.

  • For a model registered before it was released, we will assert from our own records that you hold the original — that is what born-marked means.
  • For a model that was already in the world, we will describe precisely what we hold and what we saw, and we will not assert who made it first. Why.
  • Between two claims that both look arguable, we freeze enforcement and hold the record rather than picking a winner.
  • A licence-permitted share is never reported as theft. Free and openly licensed work is screened for its own creators' benefit, not policed.
  • Every notice is reviewed and approved by a person before it is sent, without exception and at every price.

Verification

Do not take our word for any of this

Ask us. The commitments above are architecture, so each of them has an answer of the form here is the part of the system that makes it true, and we would rather give you that answer than a badge. If something on this page ever stops being true, it belongs in a changelog, not quietly deleted.

Ask us something specific Invitations open shortly — our mailbox is being set up.