Security and data

Your project data should have clear boundaries.

What BIMIQ stores, what it sends to AI, who can reach it, how long it is kept and how you delete it.

Ask a security question Read the privacy policy

Your browser

Where you work

Encrypted in transit

BIMIQ

Checks access on every request

Encrypted at rest

Project storage

Private, per organization

Only what a request needs

AI provider

Produces the result. Never trains on it.

What protects a project.

Encryption: Project data is encrypted in transit and at rest. Uploaded files are kept in private storage, scoped to your project and your organization.
Project isolation: Every request is checked against the project and organization it belongs to. Your projects and team data are kept separate from other customers.
File integrity: When a file is uploaded, BIMIQ checks its size and type and records a fingerprint of its contents, so an accepted file cannot be silently replaced.
Safe changes: Every change carries the revision it was made on. A change based on an older revision is refused rather than overwriting newer work, and every change stays in the project history.

This request shares

Furnish every 30-student classroom.

Your request
40 selected classrooms
Room schedule
Client brief.pdf

What the AI sees, and what it never does with it.

The agent runs on a commercial AI provider through its API. The project information a request needs is sent to the provider only to produce that result.

Your project content is never used to train a public AI model, by us or by our AI provider.

Manual editing, navigation and standard model operations do not involve the AI at all.

Who can do what.

Choose who can view, comment on or edit each project. The agent's changes go through the same permission and revision checks as yours.

Access	What it allows
Owner	Manage the project, its access and its settings
Can edit	Change the model, drawings and project settings
Can comment	View, and leave comments and issues
Can view	Open the project and its drawings, without editing

Organization members and roles are managed from Team. SSO and advanced security controls are available on Enterprise.

How long we keep it, and how it goes.

While your account is active

Account and project data is kept so your history stays available to you. Superseded decisions are retired rather than deleted, because the record of what changed is the point of keeping it.

When you delete a project or close your account

The associated personal data is deleted or anonymized within a reasonable period, except records we must keep to meet a legal, tax or accounting obligation.

The full detail is in the privacy policy.

Have requirements to assess? Ask us.

Tell us what your team needs to review, from data processing to deployment, and we will walk through it with you.

Start free Ask a security question