Security
Where your model travels, and what never leaves your PC
It depends on how you create the viewer. The two paths below handle your file differently — this page sets out exactly what happens in each, for the web service and the Revit add-in.
Uploads deleted after the creationThe add-in sends no geometryCard details never touch our server
Two ways to create a viewer
Web upload
Any format, from your browser
- → File is uploaded to Udraft's server
- → .rvt, .dwg and .nwc are additionally routed through Autodesk's cloud service to process
- → Viewer is generated and returned as a download
- → Server copy is deleted the moment you download it
Model file leaves your PC: yes
Revit add-in
.rvt only, membership required
- → Add-in processes the model inside Revit, on your PC
- → A small token-usage check is sent to confirm and deduct your balance
- → Viewer file is written straight to your machine
Model file leaves your PC: no — only a token check goes out
Why this matters. For NDA-bound projects, government or defence-adjacent work, or firms with strict IP policies, the add-in is the only path where the model itself is never transmitted anywhere. Every other route — including the free tier — uploads the file to a server.
What the token check actually sends
The add-in's only network calls are small and unrelated to your model's geometry or content.
| Sent | Not sent |
|---|---|
| Account identifier (the paired device's token) | Model geometry |
| Token count for the export (70 tokens) | Element properties, layers, or metadata |
| Project and view name, for your own usage list | The .rvt file itself, in any form |
| Pass/fail result of the balance check, signed |
Connectivity note. Because the token check happens before processing, the add-in needs a brief connection to complete it — it is not usable fully offline. The export engine itself is streamed to the add-in at sign-in and runs in memory on your machine. If your balance is confirmed but your connection drops immediately after, contact support with the timestamp so the usage record can be checked.
The web service
| Uploads | Held only for the conversion. The source file is deleted when the job finishes; the produced viewer waits up to 2 hours to be downloaded and is deleted the moment it is. |
|---|---|
| Autodesk formats | .rvt, .dwg and .nwc are additionally processed by Autodesk's cloud services under Udraft's account, then deleted there. |
| Payments | Handled by PayPal on PayPal's pages. Card details never touch Udraft's server. |
| Accounts | Password plus a second factor for every account; add-in devices are paired, revocable, and never hold a password. |