Book a demo
Security

Your project data stays under your control

BOQs, contracts, payment applications and drawings are among the most sensitive data a construction company has. Here are short, specific answers to the five questions our clients ask most often.

01

Where is my data?

Your project database and files are stored on Google Cloud in the European Union.

  • The database runs in a Google Cloud data centre in Belgium, and files are kept in EU storage.
  • Every company and every project has its own file storage.
  • Data is encrypted in transit (HTTPS) and at rest.
  • For the AI assistant, BIM model viewing and meeting transcription we use trusted providers, including outside the EU. They receive data only when you use that feature, and only what the request needs.
02

Who can see it?

Within BuildColab, only the people you invite — and only what you give them access to.

  • Every company works in its own space — one company’s data is not accessible to another.
  • Roles set access to every section as “View” or “Edit” — at company level and separately for each project.
  • Files are visible to their owner and to the people they are shared with — with read, comment or edit rights.
  • Subcontractors and other external participants see only the projects and data you have opened to them.
  • The providers that help us run the platform (hosting, AI and similar) process data only to deliver the service, as described in the Privacy Policy.
03

What does AI do with it?

BORO uses your data to answer questions and prepare changes — but it saves nothing without your approval and does not use your data for training.

  • BORO sees only what the user working with it is allowed to see. Permissions are checked on every action.
  • Every data change BORO proposes needs explicit approval. An unapproved request expires after 5 minutes.
  • In the company settings BORO can be switched off, capped with a monthly credit limit and limited to the tools you allow. The log shows every action it takes.
  • Neither BuildColab nor the AI providers use your data to train models — that is what the business terms of their APIs provide.
  • Connecting Claude, ChatGPT or Gemini over MCP requires signing in with your account, follows the same permissions and is read-only by default.
04

What if something goes wrong?

Deleted items can be restored, and changes leave a history.

  • Deleted files and folders stay in the trash for 30 days and can be restored.
  • Every file keeps all of its versions. Restoring an old version does not delete the newer ones.
  • BOQs, schedules and contracts keep versions and a change history.
  • The database has point-in-time recovery, and a full backup is taken before every platform update.
05

Can I take it with me?

Yes. Your data is yours, and you can export it at any time in standard formats.

  • BOQs and resource analyses — to Excel, including into your original file or on your company letterhead.
  • Schedules — to Excel, MS Project (XML) and PDF.
  • Payment applications — to Excel, one by one or as a summary.
  • Files — one by one, in any of their versions, or several at once as a ZIP archive.
  • If you end your subscription, write to us — we will help with a full export and deletion of your data in line with the Privacy Policy.

How we protect the platform

  • Encrypted connection

    All communication with the platform goes over HTTPS and is protected with standard security headers.

  • Short-lived download links

    Files are downloaded through signed links that expire after 15 minutes.

  • Strong passwords

    Passwords must be complex, and passwords exposed in known breaches are rejected. Sign-in attempts are rate-limited.

  • Monitoring

    System errors are tracked centrally, so we can react quickly when something does not work.

More questions about security?

Write to us and we will give you a specific answer — including about how personal data is processed. You will also find details in the Privacy Policy.

Write to us Book a demo