Autodesk implements security and privacy policies and practices based on industry standards and regularly conducts internal and external audits, attestations, and third-party assessments.
Certain Autodesk products are audited by external assessors and given attestations and certifications by internationally recognized standards and accreditation bodies.
Autodesk performs regular internal audits and risk assessments to monitor for changes in the data environment, test our policies and procedures, identify potential new risks, and comply with new regulatory requirements.
We test our systems, infrastructure, products, and services to identify the exploitability of these assets, discover their vulnerabilities, and remediate them to better protect our customers.
Autodesk TinkerCAD, our free web and mobile app for 3D design, electronics, and coding, is KidSAFE and Children’s Online Privacy and Protection Act (COPPA) certified. TinkerCAD has been independently reviewed, certified, and listed by KidSAFE to meet certain standards of online safety and privacy.
We have SOC 2, SOC 3 3-month, and SOC 3 12-month attestations for the products below.
Autodesk Docs
Autodesk Build
Autodesk BIM Collaborate
Autodesk BIM Collaborate PRO
Autodesk Takeoff (US & Europe)
BIM 360 Docs
BIM 360 Build
BIM 360 Design
BIM 360 Model Coordination (US & Europe)
BIM 360 Plan
PlanGrid (US & Europe)
Building Connected Pro
Bid Board Pro
TradeTapp
Infraworks
Upchain
Innovyze
Stargate
Autodesk Forma (SOC 2 Type 1)
Autodesk Platform Services
We have selected industry standard attestations and certifications for our products: IS0 27001, 27017, 27018, and 27701.
Autodesk Docs
Autodesk Build
Autodesk BIM Collaborate
Autodesk BIM Collaborate PRO
Autodesk Takeoff (US & Europe)
BIM 360 Docs
BIM 360 Build
BIM 360 Design
BIM 360 Model Coordination (US & Europe)
BIM 360 Plan
PlanGrid (US & Europe)
Building Connected Pro
Bid Board Pro
TradeTapp
Infraworks
Upchain
Innovyze
Stargate
Autodesk Forma
Autodesk Platform Services
Autodesk Fusion
Autodesk Fusion Manage (formerly Fusion Lifecycle)
Flow Production Tracking (formerly ShotGrid)
Network Licensing Reporting Manager (ISO 27001 Only)
Autodesk Docs
Autodesk Build
Autodesk BIM Collaborate PRO
BIM 360 Docs
BIM 360 Build
Autodesk has completed a Trusted Information Security Assessment Exchange (TISAX) assessment. The result is exclusively retrievable over the ENX Portal. Global offices interacting with the automotive industry are TISAX certified. The TISAX Assessments are conducted by accredited auditors who demonstrate their qualification at regular intervals.
Autodesk has attained TX-RAMP Level 1 Certification for certain products. TX-RAMP (Texas Risk and Authorization Management Program) is a framework established by the Texas Department of Information Resources to standardize security assessment, authorization, and continuous monitoring for cloud services used by Texas state agencies. It ensures that cloud service providers comply with state-specific security requirements to safeguard sensitive data and systems. The Autodesk offerings that are TX-RAMP Level 1 certified are:
Autodesk Docs (US)
Autodesk Build (US)
Autodesk BIM Collaborate (US)
Autodesk BIM Collaborate PRO (US)
Autodesk Takeoff (US)
BIM 360 Docs (US)
BIM 360 Build (US)
BIM 360 Design (US)
BIM 360 Model Coordination (US)
BIM 360 Plan (US)
PlanGrid (US)
Building Connected Pro (US)
Bid Board Pro (US)
TradeTapp (US)
Infraworks (US)
Upchain (US)
Innovyze (US)
Stargate (US)
Autodesk Forma (US)
Autodesk Platform Services (US)
Spain’s Esquema Nacional de Seguridad (ENS) establishes security controls and standards that Spanish government agencies, public services, and their service providers must meet. Autodesk has completed a self-attestation to the requirements for the ENS Basic level.
Browse answers to your questions or contact an agent for assistance.
Reduce your risks of malware exposure and software failure by using genuine Autodesk software built by Autodesk.
Are you experiencing an outage with an Autodesk product or service? Check the real-time status of your cloud services.
Help us improve product security by reporting remote code execution, authentication bypass, or other vulnerabilities.
