Security

Where your data lives

Build’s hosted project records, accounts and uploaded plan files live in Supabase in the United States. A PDF opened locally in PlanReader or the browser stays on your computer until you choose to upload or share it.

Who can see what

Your company’s records require company access. Shared links give access to the work sent through that link; answering a design question requires a verified session or an email code. A personal email proves only that address. It does not claim a firm.

Design review paths show questions, sheets, photos, models and scope without dollars. They do not grant access to the sender’s prices, margins or internal reviews. A verified work email at a confirmed project firm can open that job’s model geometry. A model deliberately published in the directory is public.

Your set checks are private

Design firms’ set checks are visible only to the person who ran them and their design company. The contractor and other companies on the job cannot read them.

PlanReader installer

Windows installer: unsigned. Windows may show Unknown publisher.

The app’s update signature is separate from a Windows publisher signature. If the release feed has no publisher-signing flag, Build shows the Windows installer as unsigned and offers the browser path first for design review. The Windows release is currently an EXE installer.