Security · Document trust

Your plans are the business. Here’s how we treat them.

An estimator’s plan set is a client relationship on paper. Everything on this page is behavior you can check — not a badge.

STORAGE

Plans live in object storage, served by signed URLs

Uploaded plan sets and page images are stored in Cloudflare R2. The app reads them through short-lived signed URLs minted per request — there are no public buckets and no permanent links to your drawings.

TRAINING

Your plans never train AI models

Detection runs against your sheets to produce your takeoff, and that is the end of it. Your drawings are not used to train our models or anyone else's.

ACCESS

Access is workspace-scoped

Every account is a workspace; projects belong to it and only invited seats can open them. Client share links expose a single estimate document by unguessable token — never the drawings behind it.

DOCUMENTS

Signed estimates are sealed and revision-bound

When a client signs, the exact revision they signed is fingerprinted (SHA-256) and stored. Every later download serves those same bytes — a signed document is never quietly re-rendered.

DELETION

Deletion on request

Delete a project and it leaves the product surfaces immediately. Want the underlying storage cleared too? Email support@bildrix.com and we'll confirm when it's done.

PAYMENTS

Card details never touch our servers

Billing runs on Stripe. We store the subscription state, not the card.

Your documents

What happens to your documents.

Bid sets are competitively sensitive. Said plainly.

WHERE FILES LIVE

Your plan sets stay in your workspace, stored on Cloudflare R2. Remove a project from your workspace whenever you choose.

WHAT AI SEES

Detection runs through enterprise AI APIs under terms that exclude training on your data. Your plans never train AI models.

WHAT CLIENTS SEE

Client view structurally hides cost and margin columns — the shared page and PDF render from it, so margin can't leak.

WHAT A SIGNATURE MEANS

The signed PDF is rendered once at signing, sealed and SHA-256 fingerprinted, bound to the exact revision signed. Every later download serves those same bytes.

WHAT WE DON'T HAVE YET

No SOC 2 audit yet — we're a small team and we'd rather say so than imply one. Ask us anything about data handling at support@bildrix.com.

What we don’t have yet

No SOC 2 audit yet.

We’re a small team and we’d rather say so than imply one. If your shop needs specifics before uploading a set — data flow, storage regions, subprocessors — ask us anything at support@bildrix.com and you’ll get a straight answer.

Book your free takeoff reviewWith your review call · PDF plan sets