NativeBIM by NativeCAD

IFC server security and privacy

Each control is named with what it does and the test behind it. The privacy statement lists every field of every message the server sends.

Security and privacy

Local by default. The server runs on your computer and talks to your MCP client over stdio. The default install opens no network port.
Edits are gated. Dry run is the default, apply is an explicit call, every write lands in a local audit log, and --read-only turns writes off.
File content is data. Text from IFC and Revit files is returned to the assistant inside a fenced block marked as data, long strings are cut, and files are written only inside folders you allow. Fencing lowers the odds that an assistant obeys text in a file; it cannot rule it out.
Signed releases. Releases are signed with an ed25519 key, and the bundled NativeCAD kernel is pinned by sha256. An update installs only if its manifest signature and checksum verify and no tool call is running. NativeBIM keeps the previous version and goes back to it if the new one fails to start three times.
Telemetry. Telemetry (usage counts and failure reports) never includes models, drawings, file names, paths or prompts. Bug-report text goes through a pattern-based redactor that can miss a value, and a short repro goes with it only if you choose to attach one. NativeBIM sends daily usage counts, automatic failure reports, bug reports and an update check every 6 hours to featureboard.ai; the privacy statement lists every field. Read the privacy statement.
What each message holds. Usage counts: calls and failures per tool, error codes, versions and operating system. Failure reports, sent when NativeBIM itself breaks: the error type, a short stack of NativeBIM function names, and argument names and types without values. Bug reports, sent only when the bim_report_bug tool is called: the text that you or your assistant write, with paths, names, identifiers and license keys replaced by pattern before sending, which can miss a value. It and bim_settings, which contacts the release server when asked to check for or install an update, are the two tools marked as reaching the network, so your client can ask before they run. Update check: a request for a public file, at most once every 6 hours, with no identifiers.
Switches. Usage counts and the update check can be turned off. Failure reports can be turned off on every license except the free license. NATIVEBIM_SANDBOX=1 stops all four messages from leaving your computer. License keys are checked on your computer, with no network call.
Your AI client. Tool results, including text from your files, pass to the assistant and its provider under their terms. Check the data settings of the client you use.

Privacy statement: the four messages, what is never sent, and the switches

Message	When	Sent to	Turn it off
Usage counts	Once per UTC day, after the day ends	`featureboard.ai/api/telemetry`	`NATIVEBIM_TELEMETRY=off`, `DO_NOT_TRACK=1` or the telemetry setting
Failure reports	When NativeBIM itself fails: an internal error, not a refused request	`featureboard.ai/api/bugs`	The same switches. Free licenses cannot turn these off.
Bug reports	Only when `bim_report_bug` is called	`featureboard.ai/api/bugs`	Don't call it, or set `NATIVEBIM_BUGS_URL=local`
Update check	On a session's opening tool call, then at most once every 6 hours while in use	`featureboard.ai/nativebim/releases/latest.json`	`NATIVEBIM_AUTO_UPDATE=off`

Never sent: model content (IFC entities, geometry, coordinates, property values, drawings, schedules); file names and paths; prompts and anything typed into a tool call, except the text of a bug report after pattern-based redaction, which can miss a value; GlobalIds and element, space, story and project names; tool arguments, results and error messages; your license key, name or e-mail, except an e-mail you choose to include with a bug report.

Everything NativeBIM keeps is under ~/.nativebim/ on your computer, and you can delete any of it. Turning usage counts off also deletes the waiting messages, the counts and the install id. NATIVEBIM_SANDBOX=1 keeps every message on the machine.

This panel is a summary. The full privacy statement lists every field of each message, the identifiers, what stays on your computer and every switch.

Notices

NativeBIM is licensed software. It does not provide design, engineering or other professional services. Outputs are drafts for review by the licensed professional of record.

Sheets are marked NOT FOR CONSTRUCTION by default.

Telemetry (usage counts and failure reports) never includes models, drawings, file names, paths or prompts. Bug-report text goes through a pattern-based redactor that can miss a value, and a short repro goes with it only if you choose to attach one. NativeBIM sends daily usage counts, automatic failure reports, bug reports and an update check every 6 hours to featureboard.ai; the privacy statement lists every field.

NativeBIM is not affiliated with, endorsed by or sponsored by the companies and organizations named here. Product names and marks belong to their owners.

NativeBIM is provided as is, without warranty of any kind. To the extent the law allows, FeatureBoard Labs Incorporated is not liable for indirect, incidental or consequential damages, lost profits or lost data, and its total liability is limited to the license fees paid in the 12 months before the claim. Read the license.