Your bids stay yours.
A tender response holds your strategy, your distinctive approach and the thinking behind it. That has to stay confidential. Below is exactly what happens to that data and what is in place. The full security document is at the bottom of the page to download.
What is in place.
| Topic | How it works |
|---|---|
| Hosting and storage | Documents and search index on AWS in Frankfurt, in the EU (with Zilliz for the index), in ISO 27001-certified data centres. Encrypted at rest (AES-256) and in transit (TLS 1.2/1.3). Nothing leaves the EU. |
| AI processing | For analyses, writing help and reviews, text goes to AI models that run inside the EU, with zero retention: nothing is kept after processing and nothing is used to train models. |
| Separation | Every organisation is separated from every other in one authorisation layer; access is granted per tender. What you upload and write is visible only to the people you give access to. How access by TenderTools administrators to customer data is technically restricted and logged is set out in the security document. |
| Reviewers | External reviewers read and comment inside your project, without an organisation of their own and without the option to export. |
| Logging | Audit trail at document level, kept for twelve months, cannot be altered. No monitoring supplier receives tender text. |
| Retention and deletion | You can always export to Word. When you cancel, we delete your organisation and all documents within 30 days of the end of the licence, and backups within 90 days. [ASSUMPTION: periods to be confirmed by the development team] |
| Subprocessors | A short list, in full in the security document. [PLACEHOLDER: list] |
| Legal basis | A data processing agreement with every customer, under the EU GDPR. For UK customers, the UK GDPR applies as well. [PLACEHOLDER: download when ready; legal check of the UK wording before publication] |
Does your IT team have its own requirements? Share them with us.
TenderTools is built on the ISO 27001 control framework; the infrastructure it runs on (AWS) is certified. Does your organisation have further requirements, such as a supplier certification of its own, SSO or specific terms in the data processing agreement? Send them to us. We shape our roadmap around what our customers need, and we are glad to think through what needs to be in place for you.
Downloads and contact.
[PLACEHOLDER: supply PDF]
Questions from your IT or security team? Email support@tendertools.ai. We answer security questions within five working days, working with the people who built it.