Your documents, with boundaries.
Operational summary for the current pilot. Updated 23 October 2026.
What the app stores
Your sign-in identity, check names, uploaded documents, extracted text, report findings, payment references and support requests. Upload only documents you are authorised to share. Remove unnecessary personal information first.
Why it is used
To extract the tender requirements, locate supplier evidence, produce your requested report, retain your history, verify payment and respond to your requests. Uploaded document text is treated as data, not as instructions to the app.
Service providers
This self-hosted application keeps its database, private uploads, salted password hashes and revocable account sessions on the operator’s server. Email addresses are account identifiers and are not email-verified during this pilot. When AI checking is connected and you request it, extracted document text is sent to OpenAI for analysis. Stripe handles checkout and card information. These providers have their own terms and privacy practices. The server operator controls hosting access and backup retention.
Retention and deletion
Original uploads and full extracted text expire after seven days. Expired files are removed on access and through configured housekeeping. Saved reports retain their cited excerpts until you delete the check. Deleting a check removes its report and source documents from the application. The payment provider retains its own transaction records.
Your access
You can inspect source text, download original documents while retained, export a report and delete checks in your workspace. Report access and document downloads are scoped to the signed-in user. To raise an access or correction issue, save a support request from your account.
Pilot details still to complete
The operator is using the Xylix brand. The legal operator’s full details, privacy contact and production hosting region must be confirmed before public paid launch. The pilot support form saves requests; an outbound support inbox is not connected yet. This page should be reviewed and completed before launch.