Security at Markforged

Scroll down
Security is a top priority at Markforged. We take protecting your organization’s data seriously and that starts with being transparent about our security practices.

Compliance

Markforged is committed to achieving and exceeding industry best practices when it comes to organizational security. We have successfully completed our ISO27001 certification which is an internationally recognized third-party validation of our security controls and management system.

Data and infrastructure security

To ensure the confidentiality and integrity your data and our applications, Markforged hosts Eiger in Amazon Web Services data centers which have achieved SOC 2, ISO27001, and PCI compliance.

Data is encrypted in transit and at rest using industry standard algorithms. Infrastructure access is locked down to trained and authorized personnel and is secured behind layered authentication.

Application security

Our engineering team follows a secure software development and lifecycle policy ensuring that new features and updates are tested and screened for security flaws before deployment. Additionally, we contract with third-party security experts to conduct penetration tests on our infrastructure, code, and IoT architecture.

Compliance Certifications

CSA STAR Level 1

Review CSA Assessment
Responsible Disclosure policy

If you believe you have found a security vulnerability related to Markforged Eiger software, Markforged hardware, or the Markforged website, please let us know. We will investigate legitimate reports and do our best to fix valid issues.

Before submitting your report, please review our Responsible Disclosure Policy. You can submit your report by emailing [email protected]. While we appreciate your bringing potential issues to our attention, please note that as a matter of policy we do not offer compensation for such reports.

Download the security whitepaper

Download our Security Whitepaper to learn more about Markforged's commitment to best-in-class security.