Security Philosophy & Threat Model
Engineering-driven 3D visualization and CGI production operate on the cutting edge of industrial product launches. Our clients entrust us with unreleased automotive components, industrial machinery, proprietary packaging systems, and patent-pending consumer hardware months before commercial unveil.
At Super Major Private Limited (operating commercially as "SuperMajor"), our threat model recognizes that an unauthorized leak of CAD geometry or unreleased visual materials can jeopardize patent filings, trigger competitor cloning, and undermine commercial launch campaigns. We treat client CAD assets with the same rigorous defense standards applied to proprietary source code or critical financial infrastructure.
CAD Geometry & Model Isolation
We enforce multi-tiered cryptographic and topological controls over raw manufacturing geometry (STEP, IGES, SolidWorks, CATIA, Parasolid, OBJ):
Encrypted Ingestion Channels & Isolated Repositories
All CAD uploads and asset transfers are enforced via TLS 1.3 in transit. Storage repositories and backup snapshots are encrypted at rest using AES-256 with isolated, customer-partitioned key management (AWS KMS/GCP KMS).
Incoming assemblies are partitioned into dedicated, segregated network shares. No shared asset repositories exist across competing brand engagements. An artist working on Automotive Client A cannot view, query, or mount storage shares allocated to Client B.
Client-Side 3D WebGL & Interactive Asset Protection
Ephemeral 3D Web Previews: Real-time browser viewers utilize lossy geometry optimization, Draco compression, and vertex quantization. Raw solid CAD topology (B-Rep) is never served to client-facing web browsers or accessible via inspect tools.
Internal mechanical tolerances, interior screw bosses, proprietary PCB layouts, and hidden manufacturing marks are algorithmically stripped and decimated before real-time compile. Only the non-sensitive outer aesthetic shell is compiled for web delivery, ensuring reverse engineering is impossible.
Strict Zero AI Ingestion Policy
In an era of generative machine learning, industrial intellectual property faces severe exposure risks from cloud AI processors that scrape or retain user inputs for neural training.
SuperMajor strictly bans the uploading, pasting, batching, or transmission of any client CAD data, technical drawings, CMF documents, unreleased product renders, or proprietary textures to public generative AI tools (including Midjourney, OpenAI/Sora/ChatGPT, Runway, Stable Diffusion, or browser-based AI mesh converters).
All 3D modeling, tessellation, shader craftsmanship, animation physics, and compositing at SuperMajor are produced directly inside enterprise workstation toolchains (such as Blender, SideFX Houdini, Maxon Cinema 4D, and Adobe Creative Cloud) running locally on studio hardware.
Physical & Studio Infrastructure
Our studio infrastructure located in Chennai, Tamil Nadu, India integrates enterprise-grade physical and network security:
- Physical Access Security: SuperMajor studio premises enforce electronic biometric/keycard access control. Visitors are escorted at all times; unreleased hardware prototypes are kept in locked, access-logged storage vaults.
- Clean Desk & Screen Policies: Workstations displaying pre-launch assets are configured to lock automatically after 3 minutes of inactivity. Monitors are positioned away from external glass windows.
- Hardware Disk Encryption: All production workstations, laptops, and local render farm nodes enforce full-disk AES-256 encryption (BitLocker / FileVault) preventing offline data extraction if a physical drive is compromised.
- VLAN Network Segmentation: Workstation subnets are segregated from guest networks. Direct peer-to-peer file sharing and external unvetted USB media are disabled at the operating system policy level.
Remote pipeline access is strictly governed via Zero-Trust Network Access (ZTNA) with multi-factor authentication (MFA) and encrypted virtual desktop infrastructure (VDI), enforcing disabled local drive redirection, clipboard restrictions, and disabled USB mass storage.
This guarantees that proprietary CAD meshes never sit on unmanaged remote endpoints or personal drives.
Identity & Access Governance
We apply the Principle of Least Privilege (PoLP) across all systems:
Hardware-backed Multi-Factor Authentication (MFA) is strictly required for all internal studio accounts, cloud vaults, and code repositories.
Artists only hold access rights to project folders actively required for their immediate production tasks. Administrative privileges are tightly quarantined.
When an artist or contractor concludes their project milestone, access credentials and tokens are cryptographically revoked within 4 hours.
Personnel Vetting & Bilateral NDAs
Human factors are central to confidentiality. SuperMajor enforces rigorous personnel verification:
- Pre-Employment Background Checks: Every employee, senior technical director, and specialist artist undergoes identity verification, past employment checks, and professional reference vetting.
- Compulsory Binding NDAs: All team members sign legally binding Non-Disclosure Agreements with SuperMajor that survive termination of employment. Breaches incur immediate legal termination and statutory civil liability.
- Security Awareness Training: Personnel complete mandatory training on phishing defense, CAD handling protocols, clean screen practices, and prompt incident reporting.
Data Purging & Lifecycle Matrix
Following deliverable handover and project sign-off, SuperMajor executes structured, auditable data lifecycle workflows:
| Asset Classification | Active Pipeline Storage | Default Retention | Purge Protocol |
|---|---|---|---|
| Raw Solid CAD (STEP / IGES) | Isolated, KMS-encrypted client SAN | Duration of project + 30 days | Cryptographic zero-fill wipe on demand with Certificate of Destruction |
| Working Scene Files (.blend / .hip) | Local NVMe production workstations | Duration of project milestone | Proprietary setups archived to air-gapped studio backup; client CAD stripped |
| Deliverable Masters (4K/8K Film, Renders) | AES-256 encrypted cold cloud vault | 3 Years (for post-launch revisions) | Permanently purged upon written client authorization |
| Interactive WebGL / AR Embeds | Edge CDN (lossy, quantized mesh) | As per client hosting agreement | Edge cache invalidation within 15 minutes of request |
| Simulation Caches & Frame Buffers | Scratch render cluster drives | 14 Business Days post-signoff | Automated cron-scheduled disk scrub |
Incident Response Protocol
SuperMajor maintains an Incident Response Plan designed to contain, remediate, and report potential security events:
1. Containment: Immediate network isolation of affected workstations or storage buckets within 60 minutes of detection.
2. Forensic Analysis: Determining root cause, affected assets, and scope of exposure using immutable server audit logs.
Affected clients will be formally notified within 24 hours of a confirmed breach or unauthorized asset access incident, accompanied by a preliminary forensic summary and containment action plan.
4. Remediation: Implementing post-incident hardening measures, rotating all credentials, and submitting a comprehensive incident closure report.
Vulnerability Disclosure & Security Contact
We welcome responsible reports from security researchers, ethical hackers, and enterprise partners regarding our web infrastructure or digital touchpoints.
Studio Security Desk
Direct Security Contact: security@supermajor.in
Executive Office: admin@supermajor.in
Public PGP Fingerprint: 4E9B 82A1 D56F 18C3 9A44 702E B378 1902 6F28 C5E1
Registered Studio: Super Major Private Limited, No 25, SSPDL, Alpha City It Park, Rajiv Gandhi Salai, Navalur, Chennai, Tamil Nadu 600130, India