This document is the standard confidentiality agreement accepted through the Uretyco partner registration and onboarding flow. If URETYCO TEKNOLOJİ ANONİM ŞİRKETİ and the relevant counterparty sign a separate written NDA or master services agreement, the signed document controls to the extent it expressly conflicts with this online version.
1. Parties, acceptance and purpose
The disclosing party may be URETYCO TEKNOLOJİ ANONİM ŞİRKETİ, a Uretyco customer, a Uretyco affiliate, or an authorized member of the Uretyco supplier network. The receiving party is the company, sole trader, employee, consultant, subcontractor candidate or manufacturing partner that accesses confidential information through the platform, email, API, file transfer, meeting, inspection, quotation request or production order.
The purpose of disclosure is limited to evaluating a partner application, preparing a quotation, reviewing manufacturability, producing or inspecting parts, coordinating logistics, resolving quality issues, meeting compliance requirements and supporting the Uretyco platform relationship. Acceptance may occur by checking the NDA box during partner registration, signing a partner agreement, accessing restricted project data or continuing to use confidential information after receiving this notice.
2. Definitions
- Disclosing Party means the person or entity that provides or makes available confidential information.
- Receiving Party means the person or entity that receives, accesses or uses confidential information.
- Representatives means directors, employees, officers, contractors, consultants, auditors, insurers, legal advisers and approved subcontractors who need access for the permitted purpose.
- Project Data means CAD files, drawings, BOMs, specifications, inspection plans, material selections, tolerance notes, order quantities, target prices, lead times, customer notes, DFM analysis, quote history and production records.
3. Confidential information
Confidential information includes any non-public information disclosed before or after acceptance of this NDA, whether marked confidential or not, where a reasonable manufacturing professional should understand that it is confidential from its nature, context or sensitivity.
| Category | Examples |
|---|---|
| Customer and project data | CAD geometry, STEP/STL/3MF/DXF files, drawings, tolerances, test requirements, application notes, end-use information, quantities and schedules. |
| Commercial information | Prices, quotes, margin assumptions, supplier rates, capacity data, order pipeline, payment terms and procurement strategy. |
| Technical and operational information | DFM comments, manufacturing routes, process settings, tooling strategy, quality plans, inspection reports, material certificates and non-public standards. |
| Platform and security information | Account credentials, access tokens, workflows, APIs, audit logs, vulnerabilities, roadmap details and internal support communications. |
| Business relationships | Customer names, supplier identities, partner scorecards, contact details and any non-public relationship or negotiation. |
4. Information outside the NDA
Confidentiality obligations do not apply to information that the Receiving Party can prove with contemporaneous records: was publicly available without breach of this NDA; was already lawfully known before disclosure; was independently developed without using confidential information; was received from a third party with the legal right to disclose it; or was approved for release in writing by an authorized representative of the Disclosing Party.
Residual general skills, experience and know-how retained in unaided memory may be used, but not where that use reveals customer identity, reproduces protected design geometry, exploits trade secrets or avoids the specific obligations in this NDA.
5. Permitted use only
The Receiving Party may use confidential information only for the permitted purpose. It must not use the information to compete for the customer outside Uretyco, contact a Uretyco customer or supplier directly unless authorized, manufacture extra parts, create substitute tooling, reverse engineer a design, train an AI or machine-learning model, benchmark the platform, build a competing marketplace, or disclose the relationship for marketing or recruitment.
Project Data must be accessed only for the project, quote or order for which it was released. A supplier that is not selected for production must stop using the released files when the quote process ends unless Uretyco expressly keeps the supplier engaged for that project.
6. Protection measures
The Receiving Party must protect confidential information at least with the same care it uses for its own sensitive information and in no event less than a reasonable professional standard for manufacturing data. Required measures include need-to-know access, strong passwords, multi-factor authentication where available, encrypted transfer channels, controlled file storage, device locking, malware protection, staff confidentiality training, visitor controls in production areas and secure disposal of printed or physical materials.
Confidential information must not be uploaded to public repositories, open forums, shared AI tools, consumer file-sharing accounts, unmanaged personal devices or any system that grants the provider rights to use the information for model training, advertising, analytics or unrelated service improvement.
7. Representatives, personnel and subcontractors
The Receiving Party may disclose confidential information to Representatives only when access is necessary for the permitted purpose and only after those Representatives are bound by written or professional confidentiality obligations at least as protective as this NDA. The Receiving Party remains responsible for any breach by its Representatives.
No subcontractor, outside machine shop, inspection laboratory, logistics provider or consultant may receive Project Data unless the subcontractor is necessary for the approved production scope, receives only the minimum data needed and is either approved by Uretyco or already covered by an equivalent confidentiality obligation.
8. CAD files, manufacturing data and physical parts
CAD and manufacturing data are treated as confidential by default. The Receiving Party must keep original files, derived CAM files, nesting files, toolpaths, fixture designs, inspection programs, production photos, scrap notes and quality records separate from unrelated customer work. Copies may be made only as needed to quote, manufacture, inspect, pack, ship or document the approved order.
- Rejected, surplus, sample, scrap and trial parts remain subject to this NDA.
- Physical parts may not be displayed, benchmarked, scanned, resold, reused, reverse engineered or shown to other customers without written permission.
- Quality records and material certificates may be retained only for audit, warranty, tax, regulatory or dispute purposes and must stay access-controlled.
- Tooling, fixtures and process improvements developed using confidential information must not disclose or embed customer-protected geometry outside the approved work.
9. Security incidents
The Receiving Party must notify Uretyco without undue delay and, where reasonably possible, within 24 hours after discovering suspected unauthorized access, loss, theft, malware infection, misdirected email, accidental upload, improper subcontractor disclosure or other incident involving confidential information. The notice should describe what happened, affected data, mitigation taken, contact person and expected next steps.
The Receiving Party must cooperate in containment, evidence preservation, customer notification analysis, remediation and regulatory response. It must not make public statements about an incident involving Uretyco or customer data without prior coordination unless legally required.
10. Personal data, KVKK and GDPR
Where confidential information includes personal data, the Receiving Party must comply with applicable data protection laws, including Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and, where relevant, the GDPR. Personal data may be processed only for the permitted purpose, only for the minimum time required and only under appropriate technical and organizational measures.
The current Uretyco privacy and KVKK information is available in the Privacy Notice and the Knowledge Base article on KVKK, GDPR and personal data. If a separate data processing agreement is required for a specific customer program, it must be agreed in writing before access is expanded.
11. Legally required disclosure
If the Receiving Party is required by law, court order, regulator, stock exchange rule or public authority to disclose confidential information, it must, unless legally prohibited, give Uretyco prompt written notice, cooperate in seeking protective treatment and disclose only the portion strictly required. Confidentiality obligations continue for all other information.
12. Return or destruction
Upon request, rejection of a partner application, completion of a quote process, termination of the relationship or completion of the relevant order, the Receiving Party must return, delete or destroy confidential information and copies in its possession or control. Uretyco may request written certification of deletion or destruction.
Limited archival copies may be retained only where required by law, tax, accounting, insurance, quality management, warranty, regulatory or dispute-preservation obligations. Those retained copies remain confidential, must not be used for any new purpose and must be deleted when the retention reason ends.
13. Ownership, IP and no license
All confidential information, intellectual property, CAD geometry, designs, drawings, inventions, trade secrets, copyrights, database rights, trademarks and related rights remain the property of the Disclosing Party or its licensors. No license, assignment, transfer, manufacturing right, reseller right or right to prepare derivative products is granted except the narrow right to use the information for the permitted purpose.
Feedback about Uretyco workflows may be used by Uretyco to improve the platform, but feedback must not include third-party confidential information unless the provider has the right to share it.
14. No publicity or reference use
The Receiving Party may not use the Uretyco name, logo, customer names, project photos, part images, order descriptions, screenshots, case studies, testimonials, press statements or social media references without prior written permission. Silence, access to a project, completion of an order or payment does not create permission to use any relationship as a public reference.
15. Term and survival
This NDA begins when accepted or when confidential information is first accessed, whichever is earlier. It remains in effect for the duration of the business relationship and for five years after the last disclosure. Trade secrets, CAD geometry, customer identity, personal data, security information and information that remains non-public continue to be protected for as long as they remain confidential under applicable law.
16. Remedies, governing law and contact
Unauthorized disclosure or misuse may cause harm that cannot be fully repaired by money damages. The Disclosing Party may seek injunctive relief, specific performance, compensation for losses, recovery of reasonable enforcement costs and any other remedy available under law or contract.
This NDA is governed by the laws of the Republic of Turkey, without prejudice to mandatory data protection or consumer rules that cannot be waived. Unless a signed agreement states otherwise, disputes are subject to the jurisdiction of the competent courts and enforcement offices of Istanbul. Confidentiality questions should be sent to info@urety.co.