Security and install

Easy to approve for shop PCs.

TrueSpindle is fully offline Windows software. This page answers the usual questions asked before a program is allowed on shop PCs.

No network use

TrueSpindle has no network code: no internet access, no license server, no telemetry, no crash reports, no update check, and no listening port. An automatic check blocks network code on every change. It works on a network with no internet at all. The only traffic it makes is normal file access to the shop folder on your file share.

What it installs

One installer. By default it installs for the signed-in user with no admin rights. Run with admin rights and the all-users switch, it installs for everyone into Program Files, ready for your software deployment tools. It carries everything it needs, with no extra runtimes and no downloads. It adds only its uninstall entry and a Start menu shortcut. No services, drivers, scheduled tasks, startup entries, or browser add-ins.

Where it writes

Its own folder in the user's app data for settings, backups, and its save log, the shop folder you set up, and folders the user picks. Never its install folder, Program Files, or system-wide settings.

Accounts and rights

It runs as the signed-in Windows user and follows your folder permissions. It has no accounts, passwords, keys, or tokens of its own. Who can change shop settings is decided by who can write to the shop folder.

Customer data

NC programs and drawings stay where users put them. Nothing leaves the PC except files written to folders and shares you control. The save log records who saved which program and a checksum of it, never paths, part numbers, or program text. All test and sample files are synthetic and made in-house. We never ask for customer files.

Licensing

A signed license file sits in the shop folder and is checked on each PC with the cryptography built into Windows. Seats are held in the shop folder while TrueSpindle runs and free themselves when it closes. The shop keeps its own seat count there, and decides whether to share its peak count at renewal.

Code quality

Every input file is treated as untrusted, with size caps, strict parsing, and paths kept inside their folder. Strict type checks, lint, an architecture check, the full test suite, a dependency vulnerability scan, a license check, and a secret scan run on every change. Each release comes with checksums and a full list of the parts it is built from.

Checking the installer

Each release comes with checksums, so you can confirm the installer is the one we built before it goes on a shop PC. The full security document shows how, and how to allow the all-users install on locked-down PCs.

Updates

It never updates itself. Each update is a new installer that you choose to run.

Questions

What are the system requirements?

Windows 10 or 11, 64-bit. Your CAD/CAM and simulation software is only needed for the automation that runs it.

Does anything run in the background?

No. TrueSpindle runs only while a user has it open. Nothing runs at Windows startup or stays running after it closes.

Can we get the full security and deployment document?

Yes. Ask through the contact form and pick Security review, and we will send the full document.

Doing a security review?

We will answer your questions and send the full security and deployment document.

Contact us