You share what your firm does and which contracts you pursue. We treat that as sensitive from day one — hosted in Europe, encrypted, and never sold.
Your account and company profile are stored in Switzerland and/or the EU. Tender data comes only from official public sources (EU TED, national portals).
All traffic is served over HTTPS/TLS (HSTS enforced). Data is encrypted at rest. The public edge runs behind Cloudflare.
Passwords are hashed with PBKDF2-HMAC-SHA256 and a per-user salt — we never store or can see your plaintext password.
Content-Security-Policy, HSTS, X-Frame-Options, CSRF protection on every form, rate-limited authentication, and secure, HttpOnly, SameSite session cookies.
We do not sell your data or use it for advertising. Your profile is never shared with other customers. Export or delete your data anytime.
Only what's needed to run the service: EU/Swiss cloud hosting, Cloudflare (edge), and — for AI drafting you opt into — our LLM provider, which does not train on your data.
Found a security issue? We want to hear from you. Email [email protected] and we'll respond promptly. Please give us reasonable time to remediate before public disclosure.
Formal certifications (SOC 2 / ISO 27001) are on our roadmap as we scale. Questions in the meantime? Contact us.
Tender