← Vitacore Forge

Privacy & Security

High-level architecture

How components interact for FormFit scanning and manufacturing workflows.

High-level Vitacore Forge architectureDiagram showing user devices connecting through CDN and web tier to an API, with database, object storage, queue, email, and compute workers on Vitacore-owned hardware in British Columbia, Canada (local airgapped network).User deviceBrowser / appEdge & web tierStatic UI, secure deliveryTLS terminationApplication APIAuth, workflows, signed URLsBusiness logicRelational databaseOrders, scan metadata, jobsObject storageVideo, meshes, exportsQueue & cacheAsync jobs, coordinationEmail deliveryTransactional messagesCompute workers (private)Mesh pipeline & slicing—no direct public ingressOwn hardware & software · British Columbia, CanadaLocal airgapped networkEncrypted in transit (client uploads over HTTPS/TLS)Logical view—reconstruction on Vitacore-owned hardware in B.C., Canada (airgapped).

User-facing tier

The browser loads the Forge web application from a globally distributed edge network. Scan video and photos are uploaded only over HTTPS (TLS). Uploads typically use time-limited, scoped URLs so files stream directly to object storage over encrypted connections without transiting application servers for the raw bytes.

Application core

The API enforces authentication, orchestrates scan and order state, issues storage grants, and enqueues work. A relational database holds structured records; a queue/cache tier coordinates asynchronous jobs and worker capacity. Identity fields (for example name and contact information) are stored separately from scan video, images, and mesh artifacts, so those categories are not commingled in one identifiable bundle in our data model.

Processing tier

Isolated compute instances run mesh generation and manufacturing prep on Vitacore-owned hardware and software in British Columbia, Canada, on our local, airgapped network. They are not reachable from the public internet. They read and write through the same storage and database contracts as the API, not via ad-hoc public endpoints.

Hosting

Scan reconstruction and related processing run on Vitacore-owned hardware and software in British Columbia, Canada, on a local airgapped network (no public internet ingress to those systems). Photogrammetry reconstruction runs in that same environment. Customers may connect from anywhere; traffic uses secure, encrypted connections between the customer's device and our systems (HTTPS/TLS).