How to Share CAD Files Securely — Without Expensive Licenses

If you make physical parts, you share CAD files constantly — with suppliers, with the shop floor, with customers, with auditors. And if you're like most manufacturers, you do it the hard way: zipping up a STEP file and emailing it, dropping drawings on a shared network folder, or buying expensive CAD seats for people who only need to look at a model.

None of that scales, and most of it isn't secure. Here's how to think about CAD sharing properly.

Why emailing CAD files breaks down

Three problems show up fast:

• Version chaos. The moment a file leaves your system, you lose control of it. Your supplier is quoting from bracket_rev_C.step while engineering has already moved to Rev D. Nobody can tell which copy is current.
• No access control. An emailed file can be forwarded anywhere. For ITAR, customer NDAs, or just competitive parts, that's a real exposure.
• License cost. Native CAD is expensive. Buying a seat for a buyer, a quality inspector, or a press operator who only needs to view and measure a model is pure waste.

What "good" CAD sharing looks like

You want people to view, measure, and mark up models in a browser — without downloading the native file and without a CAD license. The checklist:

• Browser-based 3D viewing. Open STEP/STP, IGES, and STL files in any browser. No plugin, no install.
• Auto-conversion. Native formats convert to a lightweight web format (e.g. GLB) so they load fast on any device.
• Measure and markup. Let viewers take measurements and leave comments directly on the model, so feedback is anchored to geometry instead of buried in an email thread.
• Bill of materials in context. See the BOM alongside the model, with the current revision.
• Access control and an audit trail. Decide who can see each model, and keep a record of who viewed or downloaded what.

Securing the files themselves

Sharing securely isn't just a viewer — it's how the data is handled:

• Encryption in transit and at rest (AES-256 is the baseline to expect).
• Role-based access so a supplier sees only their parts, not your whole library.
• Revision control so there's always exactly one "current" version, and the history is intact.
• Logged access so you can answer "who had this drawing, and when?" — which matters for both IP protection and audits.

A practical workflow

1. Keep CAD as part of your product data, not in scattered folders — tied to the part and its revision.
2. Share a link to the model, not the file. The link always resolves to the current revision.
3. Give viewers a browser viewer with measure and markup, so they never need the native file.
4. Scope access per supplier / per part, and let the system log it.
5. When a revision changes, everyone with the link sees the new one automatically — no re-sending.

This is exactly what we built the GatesFlow CAD Viewer to do: STEP/IGES/STL open in the browser, convert automatically, support measurement and markup, and sit next to the BOM and revision history — with access control and a full audit trail, and no CAD license required to view.

If you're still emailing STEP files, moving to link-based, access-controlled sharing is the single biggest upgrade you can make to how your team and suppliers work with models.