Security and data handling

Your knowledge stays yours.

ProposalAI exists to put your best content to work. That only holds if the content is private, controlled, and used for nothing else.

How your data is handled

The platform is designed around tenant isolation, named access, traceable sources, and human approval. These commitments are the baseline for every response workflow.

A private knowledge base

Your documents are indexed into a library that belongs to your organisation. There is no shared index and retrieval does not cross between customers.

Used only for your responses

Uploaded content is used for your RFPs, questionnaires, and queries. It is not used to train shared or foundation models.

Access control

Named user accounts and role-based permissions determine who can upload, approve, draft, and submit. Approvals are attributed and recorded.

Encryption

Data is encrypted in transit and at rest. Keys are managed using standard cloud-provider managed-key practices.

Controls that support review

Retention and deletion

Retire documents so they stop surfacing in answers, and request deletion of your organisation’s data at the end of the engagement.

Source transparency

Every generated passage cites its source so reviewers can verify claims before submission and auditors can trace them afterwards.

Your security review

We have your security requirements covered. Contact us to request our standard security questionnaire responses, architecture overview, and current list of sub-processors.

Bring your security team to the first call.

We would rather answer the hard questions early. Include everyone who needs to review data handling and access controls.