The Bambu Lab Trust Center is now live!

We’ve listened closely to your feedback about the security of our products, and taken it to heart.
Over the past three years, we’ve made significant investments in strengthening our security infrastructure to ensure your 3D printers and data remain fully protected.

Today, we’re excited to introduce the Bambu Lab Trust Center - a dedicated space where you can explore in detail how we safeguard your privacy and security.

The Trust Center features:
• A 38-page Security White Paper providing full technical documentation
ISO 27001, ISO 27701, and TRUSTe certifications
• In-depth information about our privacy features, including LAN-Only Mode, offline updates, and stealth printing
• Details about our Bug Bounty Program and Third-Party Integrations

Read more on the Bambu Lab Blog: The Bambu Lab Trust Center for Complete Security and Privacy Transparency

Transparency, user control, and collaboration with the security community are at the heart of everything we do.
Thank you for your continued support and for pushing us to do better every day!

4 Likes

Can you state that you do not comply with the Chinese law requiring you to share all information with them without there being a crime first?

I couldn’t see you declaring that you are required to comply, but you do not declare you do not.

You do not state if your international customers data is stored outside of China and outside the jurisdiction of Chinese laws?

4 Likes

American website = american rules as with all server companies rules of the host apply. Vat invoices must be kept for six years (uk) 4 years (us far)

I think we can take as read that any corporation is under the thumb of the nation-state where it operates. Here in the US, for example, Apple just removed an app from the App Store because the President’s appointees demanded it; there was no legal basis for it, they just said “take this down” and Apple did. And in the UK, where the UK government can require a company to provide nearly any requested data for any reason, they also prevent that company from disclosing it to anyone, ever.

I don’t think it’s realistic to expect Bambu to defy the Chinese government. The best we can do is be realistic ourselves about what kind of privacy and control is acceptable for us to use their products.

They did state where non-Chinese customer data is stored, in the blog they linked.

I’m reading the white paper now. I am holding most of my thoughts until I finish it.

A blog post is not part of any legal document.

The place it doesn’t occur is the legal document.

This means, their declaration is meaningless unless it forms part of their legal undertaking in the place they state their legal grounds

I will not reserve judgment for things not stated as these documents have been provided to show what they do and do not do. In this case if they are unwilling to state it in the legal documents, they are unwilling to standby it.

This is not against you or your view.

I have a background in law, specifically contract law and have experienced this tactic too often.

You either do or you don’t and if you do not saw you do, then you don’t.