Trust center

Security

Last updated September 10, 2026

Identity

Customer and member sign-in uses Autodesk OAuth 2.0 authorization with PKCE. Autodesk credentials are entered only on Autodesk-controlled pages; AdeptMEP does not collect or store Autodesk passwords.

Portal access

Administrative access is scoped by organization and role. Product entitlements are bound to verified Autodesk user identifiers. Session and invitation tokens are one-way hashed, time limited, and transmitted only over HTTPS.

Application protections

The portal enforces origin and cross-site request checks, content security policy, secure cookies, request limits, and least-privilege responses. Sensitive configuration is stored as managed service secrets rather than shipped with the Revit add-in.

Report a concern

Send security reports to security@adeptmep.com. Include the affected URL, a concise description, and steps to reproduce. Do not include customer documents or credentials in the initial message.