Security Questionnaire for Software Vendor

[Alfredo Sierra]

Hi guys!

 

My name is Alfredo Sierra, and I’m part of The Heico Companies. We’re interested in downloading and using your software to create some photometric models.

As part of our internal process, we kindly ask you to complete the attached security questionnaire.

Once we receive the completed document, we’ll be able to proceed with the software review and approval.

 

Please let us know if you have any questions or need assistance.

 

Best regards,

 

Alfredo Sierra Product Information Coordinator. Ohmite Manufacturing Co. Oriente 2 #46, Matamoros, Tamps, Mexico 87494 | www.ohmite.com

 

[Joey Moore]

Hey there. I'm not affiliated with ALICEVISION Association, but I thought I'd clear this up for you.

Meshroom is offline, single-user software developed by a non-profit. Your questions largely do not apply to it.
- 1.0: ALICEVISION Association does not handle any user data, thus they do not have an information security program

- 2.0: Meshroom does not have any form of login

- 3.0: Meshroom does not have accounts

- 4.0: ALICEVISION Association does not process or store user data

- 5.0: ALICEVISION Association does not store user data

- 6.0: ALICEVISION Association does not have workstations, servers, or customers

- 7.1: Meshroom is not designed to be exposed to the public internet

- 7.2: Meshroom is an offline application

- 7.3: Meshroom is not intended for transmitting data across the public internet

- 8.0: Meshroom is not designed to receive untrusted input

In short, Meshroom is designed exclusively for use within internal, trusted networks and does not expose any network attack surfaces. The only way to attack Meshroom is to already have control of the systems it's running on.