Security & data
Your drawings stay yours.
Stamped sets, client plans, and review comments deserve care. Here is how Vellum handles your data, in plain terms, each point backed by our published policies.
You own your drawings
You keep every right to what you upload, draw, and write in Vellum. We don't claim ownership of your content.
Terms, section 5.2Never sold, never used to train AI
We don't sell your content, use it for advertising, or use it to train machine learning or AI models without your express consent.
Privacy Policy, section 2Shared only by invitation
Documents open to the people you invite, with roles from view-only to full editing, so you decide who sees and changes what.
Docs: sharing and rolesAI on a short leash
Vellum doesn't run its own AI model. A Claude account you connect can act only while a Vellum tab is open with its control switch on, every change comes back as a manifest you can undo in one step, and assistant memory keeps derived metadata, never drawing content.
Docs: connect your ClaudeYour work stays portable
Export PDF, DXF, and PNG at any time. If a subscription ends, your content stays available for 30 days so you can take it with you.
Terms, section 11.5Encrypted in transit
Vellum is served only over HTTPS, and browsers are told to refuse unencrypted connections (HTTP Strict Transport Security).
Site configurationCard data never touches our servers
We don't collect or store card numbers. Payments run through a PCI DSS Level 1 certified payment processor.
Privacy Policy, section 1Hosted in the United States
Our servers and service providers are located in the United States.
Privacy Policy, section 5
Security reviews
Working through a vendor review?
Our team will complete your security questionnaire and walk your IT and procurement teams through how Vellum handles data, access, and retention.
Read the full Privacy Policy, Terms of Service, and Cookie Policy.