Security & Privacy
Your Data, Handled With Engineering Precision
Last reviewed: November 2026
Your models and drawings carry commercial value, so their privacy and security come first. Here is how we protect them, verify controls and limit access.
How a project is protected, start to finish
- 01NDA signedMutual NDA signed before any drawings, models or project data are shared
- 02Controlled file transferAES-256 and TLS 1.3 encrypted, access-controlled channels for every transfer
- 03Assigned team onlyOnly the engineers assigned to your project, with role-based access and MFA
- 04Retain or deleteSecurely deleted at project close, or retained as your contract requires
01ProtectHow client data is secured
Strong Encryption
AES-256 at rest and TLS 1.3 in transit, across every system that handles client data.
Zero Trust Access
Every request is verified. Role-based access, MFA and least privilege limit access by role.
Secure Storage
Encrypted, segregated storage, redundant backups. Residency, retention per contract.
Data Minimization
We collect and keep only what is needed to deliver the work, which reduces exposure.
02VerifyHow controls are tested and maintained
Independent Security Validation
Internal assessments and third-party testing, including vulnerability scans and penetration tests. Findings are fixed promptly.
Incident Response & Resilience
A defined process to detect, contain, investigate and recover, with continuous monitoring and clear escalation.
Framework-Based Controls
Controls built on ISO/IEC 27001, SOC 2 trust principles and GDPR, reviewed regularly and matched to each client's contract.
03People & PartnersWho handles your data
Security-Driven Culture
Every employee is trained in secure data handling, threat awareness and incident reporting, with regular refreshers.
Secure Vendor & Partner Ecosystem
Partners pass due diligence and contractual security obligations. Client data never goes to unverified parties.
Privacy & Transparency
Clear rules for how data is collected, stored, retained and deleted. Nothing is shared without your consent.
Need Security Documentation for Procurement?
Policy references and audit summaries are available on request or under a nondisclosure agreement. Write to security@bimgraphix.com.
For how we handle personal information submitted through this website, see our Privacy Policy.
What clients ask first
Security Questions We Are Often Asked
Straight answers from our engineering team. If your question isn’t here, ask us directly.
Will you sign an NDA before we share project files?
Yes. We sign mutual NDAs before any drawings, models or project data are shared.
Who on your team can access our project data?
Only the engineers assigned to your project. Access is granted by role, protected by multi-factor authentication and removed when the work is complete.
Where is our data stored?
In encrypted, access-controlled environments with redundant backups. Data residency and retention follow your contract and applicable regulations.
Do you meet enterprise security requirements?
Yes. Our controls are built on the ISO/IEC 27001 framework, SOC 2 trust principles and GDPR, and we meet each client’s requirements contract by contract: mutual NDAs, restricted access, data residency and audit cooperation. We do not hold a formal certification, so we complete your security questionnaire and share our policies under NDA, letting your team verify our controls directly.
How do we request security documentation?
Email security@bimgraphix.com with your requirements, or ask during your first call. We will share policy references and audit summaries, under NDA where needed.
Start a conversation
Built for Programs Where Precision Is Never Optional.
For over 20 years, one standard has guided every model, drawing and component. Let’s talk about where your programs are losing margin.
Or write to info@bimgraphix.com
- Response within one business day
- Reviewed by a senior engineer
- Confidential