generated: '2026-09-06'
method: searched
probe: true
scope: >-
  Autodesk-wide. PowerMill does not publish a product-level trust centre; Autodesk operates one
  covering its products and cloud services.
url: https://www.autodesk.com/trust/overview
compliance_url: https://www.autodesk.com/trust/compliance
certifications:
  - id: iso-27001
    name: ISO/IEC 27001 Information Security Management
    evidence: https://damassets.autodesk.net/content/dam/autodesk/www/trust/pdf/751-autdesk-ISO27001-2013-certificate.pdf
    evidence_status: 200
  - id: iso-27017
    name: ISO/IEC 27017 (cloud security controls)
    evidence: https://www.autodesk.com/trust/compliance
    note: Autodesk states ISO 27017 and 27018 are covered within the ISO 27001 audit certification.
  - id: iso-27018
    name: ISO/IEC 27018 (cloud PII protection)
    evidence: https://www.autodesk.com/trust/compliance
  - id: iso-27701
    name: ISO/IEC 27701 (privacy information management)
    evidence: https://www.autodesk.com/trust/compliance
  - id: soc-2
    name: SOC 2 attestation
    evidence: https://www.autodesk.com/trust/compliance
  - id: soc-3
    name: SOC 3 (6-month and 12-month) attestation
    evidence: https://www.autodesk.com/trust/compliance
applies_to_powermill: >-
  PARTIAL AND HONEST: these attestations are scoped to Autodesk's cloud services and corporate
  information security management. PowerMill is installed desktop software; what it consumes from
  that scope is Autodesk Identity, Licensing & Entitlement (a component on the Autodesk Health
  Dashboard). Do not read a SOC 2 report as covering toolpath computation on a customer workstation.
evidence:
  - source: https://damassets.autodesk.net/content/dam/autodesk/www/trust/pdf/751-autdesk-ISO27001-2013-certificate.pdf
    http_status: 200
    bytes: 68484
    fetched: '2026-09-06'
    detail: Autodesk-hosted ISO/IEC 27001 certificate PDF on the Autodesk asset CDN.
  - source: https://www.autodesk.com/trust/overview
    http_status: 403
    fetched: '2026-09-06'
    detail: >-
      Autodesk Trust Center landing page. Returns 403 to non-browser clients (Akamai bot policy);
      independently confirmed as Autodesk's trust site by the HackerOne programme record, which
      names it as the programme website.
  - source: https://www.autodesk.com/trust/compliance
    http_status: 403
    fetched: '2026-09-06'