Security

Information security

Point clouds, drawings, and photos capture facilities and sites exactly as they are, which makes them confidential. This page sets out how we protect them: our basic policy first, then the specific measures we take.

Policy

Information security policy

Note: This is a reference translation of the Japanese original. The Japanese text prevails in the event of any discrepancy.

We regard protecting the information our customers entrust to us, and our own information assets, as an essential responsibility in running our business. We work on information security based on the following policy.

1. Management responsibility: Led by our Representative Director, we work to improve information security in an organized and ongoing way.
2. Internal structure: We maintain a structure for keeping information security in place and improving it, and we set our measures down as internal rules.
3. Employee commitment: Our employees acquire the knowledge and skills that information security requires, and put them into practice in their daily work.
4. Compliance with laws and contracts: We comply with the laws, standards, and contractual obligations related to information security, and work to keep our customers' trust.
5. Response to violations and incidents: If a violation of laws or contracts, or an incident, occurs, we respond appropriately and work to prevent it from happening again.

Enacted Oct 26, 2026
Yoshikazu Fujiwara, Representative Director, Recmill Inc.

Declaration

SECURITY ACTION declaration

We have made a one-star declaration under SECURITY ACTION, a program run by the Information-technology Promotion Agency, Japan (IPA). At this level, a company commits to the basic information security measures set out in IPA's guidelines for small and medium-sized enterprises.

SECURITY ACTION is a self-declaration program: companies declare that they are taking information security measures. For details, see IPA's SECURITY ACTION page.

Data

How we handle the data you entrust to us

Point clouds, drawings, photos, and other data you entrust to us for scanning or drafting are handled as follows, from the moment we receive them until after delivery.

Non-disclosure agreements: We sign a non-disclosure agreement (NDA) on request.
Storage and access: Your data is kept only in designated storage, and only the staff assigned to your project work with it.
Handover: We hand data over using time-limited links, passwords, encrypted storage media, or similar safeguards.
After delivery: On request, we delete or return your data after delivery.
Subcontracting: If we subcontract part of the work, we first obtain your consent, and we hold the subcontractor to the same confidentiality obligations that apply to us.

Operation

On site and in house

On-site scanning: We agree with you in advance on the area to be scanned, and take care over what gets captured, such as people's faces and equipment that must not be photographed.
24/7 monitoring: An AI agent dedicated to security monitoring watches over our entire company 24 hours a day, 365 days a year. When it detects abnormal access, it blocks that access automatically on the spot.
Software updates: We apply operating system and software updates to our work computers as they are released.
Multi-factor authentication: Our business accounts, such as email and cloud services, are protected with multi-factor authentication (MFA).

Incident

If an incident occurs

We have set procedures for who contacts you, and how, if a data leak or similar incident occurs. If one does, we will follow those procedures to contact you promptly, investigate the cause, and work to prevent a recurrence.

TENZOH security: how TENZOH, our point cloud viewer, is designed and protected
Privacy Policy: how we handle personal information, and how this website encrypts communications

Questions about security? Talk to us.

Note: This English page is a reference translation provided for convenience. The Japanese version is the authoritative text, and the Japanese version prevails in the event of any discrepancy. Recmill Inc. handles personal information in accordance with the Act on the Protection of Personal Information (APPI) of Japan.