Security and Autodesk integration

How BIMRelay protects your project data.

BIMRelay reads your models to build the workbook, keeps your team's edits in BIMRelay, and never writes back to your Revit files.

Data location

The application and database run in Frankfurt, Germany, and model files are stored in Ireland. The provider list shows every service and its location.

Encryption

All connections use HTTPS. Passwords are stored as one-way hashes, and Autodesk credentials are encrypted.

Access control

Workspace admins and project Manager, Editor, and Read-only roles control who can manage, edit, or view each project. Removing someone ends their access immediately, including open sessions.

Autodesk connections

Connect Forma with your Autodesk account or an Autodesk Secure Service Account (SSA), or upload a Revit model directly. BIMRelay never writes changes back to your Revit models.

Backups and deletion

Databases are backed up regularly. A deleted project is permanently removed after a 30-day grace period.

No AI training

BIMRelay and its AI providers never use your project data to train general-purpose AI models.

OAuth scopes and publishing

Read access for models. Write access only for completed XLSX publishing.

BIMRelay reads published models and project information from Autodesk. Write access is requested only when you publish a finished XLSX to a Forma folder, and it is never used to change your models.

Workspace admins control which Autodesk connections are allowed and can revoke one at any time.