RBAC & Identity
SSO via SAML and OIDC, SCIM provisioning, and permissions scoped to project, package and record type.
ENTERPRISE
AI with governance built in.
Designed for controlled pilots, enterprise integration and human-accountable decisions — on projects where every significant decision may eventually be examined.
CONTROLS
Enterprise controls.
Human-in-the-loop
Explicit approval before any consequential AI-recommended action, recorded with its evidence set.
Auditability
Immutable evidence, reasoning, approval and outcome trails — exportable for claims proceedings.
Private Deployment
Cloud, private cloud and customer-VPC deployment, with region selection for data residency.
Model Flexibility
No lock-in to a single foundation model or provider; self-hosted options for restricted data.
Integration-first
Connect existing BIM, schedule and project-control systems rather than replacing them.
PROCUREMENT
What your security review will ask for.
We would rather hand this over at the first meeting than at the fourth.
DOCUMENTATION
Security pack
Architecture overview, DPA, sub-processor list and penetration test summary, under NDA.
COMMITMENTS
Written, not implied
No training on customer data, region selection and notification windows are contractual terms.
ASSURANCE
Current status, stated plainly
We tell you what is implemented, what is in programme and what is roadmap. See Security & Trust