Is Bildstak SOC 2 or ISO 27001 certified?
Bildstak does not advertise SOC 2 or ISO 27001 certification. Its security story is architectural: your data can stay on your side. Bildstak runs in your own VPC, on-premise, or fully air-gapped, and a Desktop app and Embedded SDK keep data local.
Rather than leaning on certifications, Bildstak's approach to security is to give you deployment models where sensitive project data never has to leave your control:
- Customer-VPC and on-premise — run Bildstak inside your own cloud account or data center.
- Air-gapped — the same product runs with no outbound connectivity for the most sensitive programmes.
- Desktop app — query local IFC models on a workstation, offline.
- Embedded SDK — embed Bildstak's chat, reports and explorer inside your own application, with data staying in your environment.
Bildstak does not train any AI model on your project data. For procurement teams that need a paper trail, the platform provides audit logs of queries and actions. If you have a specific compliance requirement, the best path is to talk to us about the deployment model that fits — we lead with architecture you can verify rather than badges.
Updated 2026-06-19