Trust and security

Your drawings are the firm. We treat them that way.

How we secure your proprietary plans, BIM parameters and firm-wide code libraries.

AICPA SOC 2 Type II

SOC 2 Type II certified

Archiboost is independently audited for security, availability and confidentiality, for every firm that trusts us with their drawings and compliance data.

Security

Access and infrastructure

Role-based access control locks down drawing catalogs, firm checklists and spec models per project and per team member. Multi-factor authentication and least-privilege policies enforce the baseline.

Confidentiality

Encryption in storage and transit

Client drawings, codes and private model artifacts are secured with AES-256 at rest and TLS 1.3 in transit.

Privacy

Never trained on your data

Archiboost never uses your proprietary designs or compliance inputs to train models, ours or anyone else's. Your data stays yours.

At rest
AES-256
In transit
TLS 1.3
Access
SSO · MFA · RBAC
Hosting
US regions
Retention
Deletion by request
Your questions, answered

Before you upload a set

Where are drawings stored, and who can see them?

The service is hosted in US regions. Access is controlled by organization, project, and role. Authorized members or administrators in your organization may be able to see uploaded content. Archiboost and contracted service providers access information as needed to operate the service.

Are drawings sent to outside AI providers?

They may be. Our infrastructure and AI providers may process uploaded content and prompts when needed to fulfill a request. We share the information needed to provide the service under contractual confidentiality and security obligations. Ask us for the current provider list before sending a restricted project.

Are our drawings used to train AI models?

No. We do not use private uploaded content or prompts to train AI models, and we require our AI providers not to use that information for model training.

How long are files kept, and how do we delete them?

We retain information as needed to provide the service and meet legal and business obligations. You can request deletion. We make commercially reasonable efforts to remove deleted content from active systems; backup copies may remain for a limited time. Ask us about the retention schedule for your project.

What if our client restricts AI or requires an NDA?

Contact us before uploading drawings. Tell us the project restrictions and any confidentiality agreement you need reviewed so we can confirm whether the service is suitable. Do not submit restricted material until your team has approved the workflow.

Read the full privacy policy or email info@archiboost.ai for project-specific requirements.

Security questions?

Ask the people who built it.