Enterprise Trust & Subcontractor Assurance

Manufacturer Declarations & Software Tool Qualification

Subcontractors and machine shops using BalloonPlot can provide these pre-certified declarations to their aerospace, defense, automotive, and industrial OEM auditors and prime contractors to clear vendor qualification with zero friction.

AS9102 Rev C Software Tool Qualification

Meets aerospace First Article Inspection (FAI) requirements for characteristic numbering, coordinate mapping, and non-destructive overlay processing.

  • Form 3 Direct Mapping: Characteristics automatically indexed (1, 2, 3... n) to nominal values, limits, and GD&T classifications.
  • Zero Blueprint Alteration: Original drawing vector elements and revision blocks remain strictly unmutated.
  • Human-in-the-Loop Safeguard: Full manual review, override, and tolerance editing gate before exporting.

ISO 9001:2015 §7.1.5 & IATF 16949 SQA

Fully certified for Quality Management Systems requiring software tool verification and measurement resource traceability.

  • Pre-Release Verification (V&V): Rigorously regression-tested against 1,500+ ASME Y14.5 and ISO 1101 benchmark drawing sets.
  • Change Control: Formal Semantic Versioning with documented release changelogs.
  • Deterministic Algorithms: OCR bounding and tolerance math operate deterministically across all client seats.

ITAR, EAR & Zero CAD Retention Policy

Engineered specifically for defense subcontractors handling controlled technical data packages and proprietary defense blueprints.

  • 100% Client-Side Processing: Drawings are parsed and ballooned inside local workstation RAM. Blueprints are never stored on remote cloud servers.
  • Zero AI Model Training: Client blueprints and dimension data are strictly prohibited from training public AI models.
  • Data Sovereignty: No technical data packages ever leave your national jurisdiction or company network perimeter.

Air-Gapped & SCIF Operational Readiness

Designed to function flawlessly in isolated manufacturing cleanrooms, classified defense SCIFs, and disconnected local area networks.

  • Cryptographic Offline Licensing: Standalone activation keys requiring zero outbound internet connection.
  • Zero Background Telemetry: No outbound analytics pinging or remote tracking in offline desktop mode.
  • SHA-256 Binary Verification: Digitally signed installer packages verifiable against IT hash registries.
AUDIT REFERENCE: BP-DECL-2026-V2

Standard Vendor Security Assessment (VSA) Matrix

Pre-approved answers for Tier-1 OEM supplier questionnaires (SIG / CAIQ aligned).

Download Complete Text
Supplier Audit Question Certified Vendor Declaration (BalloonPlot)
Drawing Storage Location 100% Local Machine (Client Workstation). Drawings are never uploaded, persisted, or stored on BalloonPlot cloud servers.
Machine Learning & AI Ingestion Zero Model Training Guarantee. Customer blueprints, proprietary dimensions, and title block IP are never used to train public or commercial AI models.
Network Connectivity Required None for core drawing ballooning and FAI export. Optional port 443 outbound only for initial cloud license check (offline keys available).
AS9102 Rev C Compliance Certified compliant with Form 1, Form 2, and Form 3 characteristic numbering, sheet zone identification, and tolerance boundary extraction.
Encryption Standards TLS 1.3 for licensing transactions; SHA-256 binary validation hashes for desktop installers.

Standard Manufacturer Documentation & Deliverables Package

SUPPLIER AUDIT READY

When qualifying BalloonPlot for your Quality Management System (QMS), we provide the complete documentation package required by internal auditors and Tier-1 customers:

1. Manufacturer Certificate of Conformance (CoC)

Official signed declaration certifying software build number, SHA-256 installer hash, and conformance to AS9102 Rev C and ASME Y14.5 / ISO 1101 standards.

2. Software Tool Qualification & V&V Report

Verification & Validation (V&V) test matrix proving deterministic characteristic numbering and non-destructive vector overlay per ISO 9001 §7.1.5 and AS9100 §7.1.5.2.

3. Data Sovereignty & Zero CAD Retention Clause

Legal attestations verifying 100% local client-side processing, zero remote CAD cloud retention, and strict non-use of customer blueprints for AI model training.

4. Pre-Filled Vendor Security Assessment (VSA / CAIQ)

Standardized responses to Tier-1 OEM supplier security questionnaires covering access control, offline operation, and ITAR compliance.

Frequently Asked Questions for Quality Managers

Can our auditors inspect a signed Certificate of Conformance (CoC)?

Yes. We provide digitally signed Certificates of Conformance stating the exact software build, SHA-256 installer hash, and AS9102/ISO 9001 validation verification. Contact compliance@balloonplot.com or open a ticket from your dashboard.

Does BalloonPlot alter our original customer CAD/PDF drawings?

Never. BalloonPlot uses non-destructive vector overlays. The underlying PDF or CAD geometry is never flattened, compressed, or altered. The exported drawing retains 100% vector resolution and font fidelity.

Is BalloonPlot compliant with defense ITAR / EAR restrictions?

Yes. Because BalloonPlot Desktop processes drawings locally without cloud uploads or foreign server routing, technical data packages remain entirely within your authorized IT environment and jurisdiction.