# BALLOONPLOT TECHNOLOGIES
## MANUFACTURER DECLARATION OF SOFTWARE TOOL QUALIFICATION & COMPLIANCE
**Document Control Reference:** BP-DECL-2026-V2  
**Effective Date:** 2026-09-02  
**Target Industries:** Aerospace & Defense, Automotive, Medical Devices, Heavy Precision Engineering  
**Applicable Standards:** AS9102 Rev C, ISO 9001:2015 §7.1.5, IATF 16949:2016, NIST SP 800-171, ITAR/EAR Data Protection Guidelines  

---

### 1. Executive Summary & Purpose
This Manufacturer Declaration provides quality managers, compliance auditors, and defense subcontractors with formal written verification that **BalloonPlot Desktop Studio** satisfies industry standards for Computer Software Configuration and Inspection Software Validation.

Subcontractors utilizing BalloonPlot to generate First Article Inspection (FAI) reports, ballooned engineering blueprints, and inspection plan characteristic listings can provide this dossier to their Tier-1 OEM customers, prime defense integrators, and quality auditors to prove tool verification and data sovereignty.

---

### 2. Software Validation & Verification (V&V) Statement
**Standard Clause Alignment:** AS9100 Rev D §7.1.5.2 / ISO 9001:2015 §7.1.5 (Monitoring & Measuring Resources)

BalloonPlot Technologies certifies the following:
1. **Vector & Raster Fidelity:** BalloonPlot imports PDF, DXF, DWG, TIFF, and PNG engineering drawings into a non-destructive virtual overlay layer. The underlying drawing geometry, title blocks, and notes are never altered, modified, or re-rendered in a lossy format.
2. **Deterministic Extraction:** Optical Character Recognition (OCR) and GD&T symbol detection algorithms operate with deterministic bounding box coordinates and characteristic identification numbering (1, 2, 3... n).
3. **Human-in-the-Loop Safeguard:** BalloonPlot is engineered with mandatory verification gates. Operators can review, reorder, adjust, or edit any detected nominal dimension, upper/lower tolerance, and GD&T modifier prior to publishing the final AS9102 Form 3 characteristic list or Excel inspection sheet.
4. **Export Integrity:** The generated AS9102 Rev C Form 1, Form 2, and Form 3 documents use standardized OpenXML/CSV structures with traceable characteristic IDs matched 1-to-1 to drawing balloon locations.

---

### 3. Data Sovereignty, Defense Export Controls & Zero CAD Retention
**Standard Clause Alignment:** ITAR 22 CFR §120–130, EAR 15 CFR §730–774, NIST SP 800-171

Precision manufacturing subcontractors frequently handle sensitive technical data, defense blueprints, and export-controlled technical data packages. BalloonPlot is architected to eliminate data leakage:

| Dimension | Policy & Implementation |
| :--- | :--- |
| **Drawing File Processing** | **100% Client-Side / Local Machine.** Blueprints and CAD files are loaded and parsed locally in workstation memory. They are **never uploaded to public cloud buckets or persistent remote servers**. |
| **AI / ML Model Training** | **Strict Zero-Retention Guarantee.** Customer drawings, annotations, dimensions, proprietary designs, and part numbers are **never ingested or used to train public or shared machine learning models**. |
| **Licensing Validation** | Cryptographically signed offline keys or TLS 1.3 encrypted metadata handshake containing only license status and seat ID. No drawing content or filenames are ever transmitted. |
| **Air-Gapped / SCIF Compatibility** | BalloonPlot Desktop can run completely disconnected from the internet in air-gapped environments, secure labs, and defense facilities. |

---

### 4. Software Quality Assurance (SQA) & Change Control
1. **Versioning Policy:** Software builds follow Semantic Versioning (MAJOR.MINOR.PATCH).
2. **Release Regression Testing:** Each production build undergoes automated test suites comprising over 1,500 standard engineering drawing test cases (including ANSI Y14.5M, ASME Y14.5-2018, and ISO 1101 geometric tolerances).
3. **Binary Tamper Protection:** Official desktop installers are published with cryptographic SHA-256 checksums, enabling customer IT departments to verify package authenticity and integrity prior to deployment.

---

### 5. Vendor Security Assessment (VSA) Reference Matrix

| Audit Question | BalloonPlot Certified Response |
| :--- | :--- |
| **Does the application process customer confidential data in the cloud?** | **No.** All drawing rasterization, OCR, and ballooning algorithms execute locally on the client endpoint. |
| **What network ports are required for software operation?** | None during active ballooning. Optional outbound HTTPS (Port 443) only for periodic license renewal (unless Air-Gap license is issued). |
| **Can client data be recovered by BalloonPlot personnel?** | **No.** BalloonPlot does not hold or mirror customer blueprint archives. |
| **Is the software compatible with FAI standard AS9102 Form 3?** | **Yes.** Balloon numbers, drawing sheet coordinates, characteristic classifications (Critical, Major, Key), nominal dimensions, and upper/lower limits map directly to Form 3 columns. |

---

### 6. Sign-off & Verification Authority
This document serves as an authentic Manufacturer Declaration of Software Tool Qualification and can be attached to AS9100/ISO 9001 internal audit packs and customer supplier quality assurance dossiers.

**Authorized Representative:** Quality & Compliance Operations  
**Entity:** BalloonPlot Technologies  
**Contact:** `compliance@balloonplot.com` | `support@balloonplot.com`  
**Official Portal:** `https://balloonplot.com/compliance.html`