Data Protection & Security Overview

For customer risk assessments (GDPR / security).

A. Controller / Contact

PlanFinder
Dr. Claas Noorduijnstraat 9A-28, 6522 AS Nijmegen, The Netherlands
Primary contact: contact@planfinder.xyz

B. Product summary

PlanFinder offers three plugins for established CAD/BIM platforms:

• PlanFinder (Rhino, Grasshopper, Revit): floor plan generation, fitting and furnishing, with optional cloud-based layout generation (“Generate”).

• Chonk (Rhino, Revit): pattern recognition across CAD/BIM geometry.

• SpaceFill (Revit): furniture layout suggestions learned from the user’s own projects.

Model authoring and analysis run locally inside the host application. This includes Fit and Furnish in PlanFinder, and all of Chonk and SpaceFill. Cloud services are used only for Generate, license validation and error reporting.

C. Data processed

Generate (PlanFinder only): The plugin transmits:

• Geometry in PlanFinder’s internal plain geometry format (boundary polygon, façade geometry, entrance geometry).

• User-selected generation preferences (e.g., preferred room counts).

No BIM parameters, metadata, user names, or other non-geometric model information are included in the Generate payload.

Licensing (all plugins): Email address, company name, machine identifier (stored in AWS RDS).

Error reports (all plugins): When a plugin error occurs, the error message, technical stack trace and plugin version are sent to PlanFinder’s error-logging endpoint. These reports contain no model geometry or project files, but a stack trace may include local file paths.

Chonk and SpaceFill do not transmit model data. Their analysis runs entirely on the user’s machine.

D. Hosting and data location

Cloud services run on AWS in eu-central-1 (Frankfurt). Database storage (AWS RDS) is configured in the same region.

E. Storage and retention

• Generate payload: Not stored persistently; processed transiently in Lambda.

• Licensing records: Stored for the term of the customer relationship plus a limited period for support/accounting.

• Error reports: Kept only as long as needed for troubleshooting.

• CloudWatch logs: Technical logs retained per configured AWS policy (retention can be set per log group).

F. Security controls (high level)

• Transport security: HTTPS/TLS.

• Access control: restricted AWS IAM access (least privilege).

• Operational logging for troubleshooting and security monitoring.

G. Encryption and backups (AWS configuration)

Database encryption-at-rest and backup location/retention are managed via AWS RDS configuration. If required for procurement, PlanFinder can provide the current configuration details upon request.

H. Sub-processors

• Amazon Web Services (AWS) – compute, database, logging (EU region Frankfurt).

• Stripe – payment processing and subscription management.

I. Payments / Stripe and transfers

Payments are handled via Stripe. Stripe may process data internationally using appropriate safeguards (e.g., SCCs).