Procurement & IT Security

Procurement & Security

Everything your purchasing, legal, and IT security teams need to evaluate WeldAI Scan for a Tier-1 automotive supply chain.

Legal Entity

MISNET Michał Chojaczyk

Bulwar Ikara 11/18, 54-130 Wrocław, Poland
Legal form: Sole proprietorship (JDG)
NIP / EU VAT ID: PL8971614358
D-U-N-S® Number: 427831260

Standards & Measurement Validation

WeldAI Scan is designed to support customers operating under IATF 16949 by providing a full audit trail of inspection records (user, timestamp, and any change to a measurement result). Internal testing: segmentation overlap IoU = 0.94; scale reading error below 2%. Neither figure is a measurement-system accuracy result. A formal MSA / VDA 5 study (Gauge R&R) has not been performed yet - it is carried out on your own weld samples during pilot validation.

To be explicit for supplier qualification: MISNET does not hold IATF 16949 certification, and WeldAI Scan is not certified to any measurement standard. IATF 16949 is an organizational certification issued to a company by an accredited certification body following an audit - it is not a property of a software product.

Hosting & Data Residency

Application server and PostgreSQL database: OVH, Frankfurt (EU). Weld images and generated PDF reports: AWS S3, eu-central-1 (Frankfurt, EU). No production data is processed outside the European Union.

Dedicated Single-Tenant Instance

Each customer runs on its own server with its own database and its own object storage bucket. Separation from other customers is at infrastructure level, not application logic.

No Client-Side Installation

No agent, no plant-side service, no network share. A standard web browser is the only client software required, and no inbound connection into the customer network is needed at any point.

Subprocessors

Vendor Role Location
OVH SAS Application hosting, PostgreSQL database, DNS Frankfurt am Main, Germany (EU)
Amazon Web Services (S3) Storage of weld images and generated PDF reports Frankfurt, Germany (eu-central-1, EU)
Google (Google Workspace) Business correspondence only - no access to weld images, measurement results or reports Global, governed by the Google Workspace Data Processing Addendum

Our source code repository (GitHub) and the SSL/DNS infrastructure of this marketing website are not listed above, as neither processes customer production data (weld images, measurement results, or reports).

Data Retention

Retention periods are defined per client agreement / DPA, aligned with the client's own quality-record retention requirements (e.g. IATF 16949 record-keeping rules). Data is deleted or returned within the timeframe agreed in the contract upon its termination.

Data Access

Access to client data is limited to MISNET personnel bound by a signed NDA. Where subcontractors are involved, the same confidentiality obligations cascade down under equivalent NDA terms.

On-Premise Deployment

For clients requiring full data sovereignty, WeldAI Scan can be deployed as a Docker container inside your own infrastructure, with data stored in the location and folder/database structure you specify. MISNET retains a limited, scheduled service access strictly for software updates and deployment of improved AI models - never ad-hoc, always access-logged.

Security Contact

Michał Chojaczyk - michal@misnet.pl