RVTCONVERT
Convert a file

Legal

Business use: DPA and NDA

For practices and firms using RVT Convert in professional work: how we protect client models, our Data Processing Addendum, and non-disclosure agreements.

Last updated 14 October 2026

Our commitments to firms

  • Used only to convert. Your models are processed for one purpose: saving them as Revit 2023.
  • Deleted on a fixed schedule. Uploaded files are deleted as soon as they have been processed. Converted files are deleted 24 hours later, when the download link expires.
  • Processed in the United Kingdom, by us. Files go straight to our own conversion service. They are never passed to cloud platforms, AI services or other third parties.
  • Handled automatically. Nobody opens or looks at your models as part of running the service.
  • Yours throughout. We claim no rights in your files and never reuse them, including to train software.
  • A processor agreement from day one. We act as your processor under the UK GDPR and the Data Protection Act 2018, with the Data Processing Addendum below in place from your first upload.

Non-disclosure agreements

Yes. We are happy to sign a mutual non-disclosure agreement, or to review your firm's own NDA. Email support@rvtconvert.com with your organisation's name and the agreement, and we will reply within two working days.

Data Processing Addendum

Revit models often contain personal data, such as the names and contact details of a project team or a client. When you use RVT Convert for your organisation, you are the controller of that data and we process it for you. The addendum below is the controller-processor contract that Article 28 of the UK GDPR requires, and it covers the EU GDPR in the same way where that applies. It applies automatically from the first time you use the service for your organisation, and forms part of our terms of use. If your firm needs a signed copy, email support@rvtconvert.com.

1. Parties and roles

"Customer" is the organisation using RVT Convert, which acts as controller. "We" are Fortress Associates Ltd, London, a company registered in England and Wales (company number 14576806), registered office 202 Mayfly Close, London E3 3ZG, acting as processor. "Customer Files" are the files the Customer uploads, and "Customer Personal Data" is any personal data they contain. The terms used have the meanings given in the UK GDPR and the Data Protection Act 2018.

2. Subject matter and duration

We process Customer Personal Data only to convert Customer Files to Revit 2023 and to keep each result available for download. Processing for each file lasts from upload until deletion: the uploaded file is deleted as soon as processing finishes, and the converted file 24 hours after it is produced.

3. Nature of the processing

Automated conversion of Revit files to an earlier file version, and temporary storage of the result so that the Customer can download it.

4. Personal data and data subjects

Any personal data the Customer includes in a model, such as names, job titles, contact details, signatures or stamps on title blocks. The data subjects are the Customer's staff, clients, consultants and other project contacts.

5. Our obligations

We will:

  • process Customer Personal Data only on the Customer's documented instructions; uploading a file and asking for its conversion is that instruction. We will tell the Customer if we believe an instruction breaks data protection law;
  • make sure anyone authorised to process Customer Personal Data is bound by confidentiality;
  • keep the security measures in the Annex in place, as Article 32 of the UK GDPR requires;
  • not use a sub-processor for Customer Files. We use none today. If that ever changes, we will give at least 30 days' notice on this page, and the Customer may object or stop using the service;
  • help the Customer respond to requests from data subjects, and with its security, breach-notification and impact-assessment obligations, as far as our role allows;
  • delete Customer Files on the schedule in section 2 and keep no copies;
  • tell the Customer without undue delay, and within 48 hours of becoming aware, of any personal data breach affecting Customer Personal Data;
  • not transfer Customer Files outside the United Kingdom;
  • give the Customer the information it reasonably needs to show compliance with this addendum, including answers to reasonable written security questions.

6. Liability and precedence

Each party's liability under this addendum is governed by the terms of use. If this addendum and the terms of use conflict on the processing of personal data, this addendum prevails.

7. Law

This addendum is governed by the law of England and Wales.

Annex: security measures

  • Encrypted connections (TLS) for every upload and download.
  • Files travel straight from the user's browser to our own conversion service, with no intermediary.
  • Each conversion runs on its own in an isolated, resource-limited environment.
  • No cloud, AI or third-party processing of Customer Files.
  • Automatic deletion on a fixed schedule.
  • Download links are long, random and impossible to guess, expire after 24 hours and allow a limited number of downloads.
  • Access to our systems is restricted to authorised people.
  • IP addresses used for fair-use limits are stored only in a one-way scrambled form.