NativeCAD for defense

AI-built parts. Your network. Nothing leaves.

NativeCAD runs entirely inside your own AWS GovCloud account or air-gapped network. Your engineers and an AI agent build on the same live model, every action goes on the record, and no part, prompt or log line crosses your boundary.

Talk to sales GovCloud deployment guide CMMC responsibility map
0routes from NativeCAD to the internet
Every actionby a person or the agent, in a tamper-evident audit log
1 live modelyour engineers and the agent edit it together
In-boundary AIClaude on Amazon Bedrock, inside AWS GovCloud

You and the agent, same model.

The agent builds the part. Anyone on your team can take the wheel, fix a feature, leave a note and hand it back. The agent picks up the fix, keeps going, and never quietly undoes your change.

The agent builds

A real part, feature by feature

Every feature lands in the tree your engineers already read, marked as the agent's.

You take the wheel

Fix any feature in place

Change a dimension, suppress a feature or replace it with your own, and leave a note.

The agent carries on

Your fix stands

The agent reads your change and your note, builds on it, and keeps its hands off your work.

Nothing leaves your boundary.

One container and one stack, deployed in your account. The modeler, the CAD server, your files, the audit trail and the agent's model all sit inside your network. There is no licence server, telemetry or update call to reach.

  • Runs in your AWS GovCloud account or on an air-gapped network
  • Parts live in an encrypted workspace the CAD server cannot leave
  • The agent's Claude model answers from Amazon Bedrock in GovCloud, over a private endpoint
  • Every tool call and every human edit is written to a hash-chained audit log
NativeCAD deployment inside your boundary Your engineers and the AI agent connect to one NativeCAD container inside your GovCloud account or air-gapped network. The container holds the modeler and the MCP server on one live model, writes to an encrypted workspace and a hash-chained audit log. The agent's Claude model runs on Amazon Bedrock inside the same boundary. There is no route to the internet. No route to the internet YOUR GOVCLOUD ACCOUNT OR AIR-GAPPED NETWORK Your engineers in the browser modeler AI agent Claude Code or Agent SDK Modeler people edit here MCP server the agent builds here ONE LIVE MODEL same features, same history NativeCAD container sandboxed: workspace jail, no egress Workspace encrypted at rest Audit log hash-chained, every action Claude model Amazon Bedrock, private endpoint
Everything inside the dashed line runs in your environment.

Ready for your assessor.

NativeCAD helps you meet the CMMC Level 2 and NIST SP 800-171 controls for access, audit, configuration and system protection. The responsibility map shows, requirement by requirement, what NativeCAD covers and what your boundary owns, ready to cite in your System Security Plan. Every release ships with a CycloneDX software bill of materials.

CMMC responsibility map

Access control, audit, configuration management, identification, media and system protection, mapped to evidence.

Open the map →

GovCloud deployment guide

One image and one CloudFormation stack, from build host to a running service in your account.

Read the guide →

Put NativeCAD inside your boundary.

Tell us about your program and your environment, and we will stand up a working deployment with your team.

More demos

All demos →

Build your own part with NativeCAD

Free for education and makers with a registered key · $200 per seat per year · Kernel SDK for products.