Your evidence deserves care.
Practical controls for sensitive tender documents, with clear limits. Updated 26 October 2026.
Private AI processing
Our private AI service runs on our New Zealand server. When you request an AI review, extracted document text goes to that private service. The application has no external AI fallback.
Additional screening with Blackwall
We use Blackwall LLM Shield as an additional local security check for AI reviews. It looks for suspicious instructions embedded in documents before they reach the model. Our own checks also validate source references and flag some inconsistencies in evidence.
A detected issue in buyer documents stops AI analysis. A detected issue in supplier evidence blocks automated comparison and directs you to manual review. Screening failures stop the affected operation. These controls can miss attacks or flag legitimate text, so they do not replace your review.
Your original evidence stays intact
Security screening does not rewrite your uploaded files or replace the source text used for citations. The application retains bounded warning identifiers rather than exporting full Blackwall reports or decoded document content to operational notifications. We do not enable Blackwall cloud adapters, remote telemetry or automatic model downloads.
Access belongs to your workspace
Account sessions and permission checks protect reports and document downloads. Check owners control invitations. Viewers can read; editors can change review notes. Revoking an invitation removes future access through the service, but cannot erase copies already downloaded.
Protection in transit and limited retention
The public website uses HTTPS. Private application storage uses account access checks. We do not claim that this is an independently certified security system or that every stored file is encrypted at rest.
Original uploads and full extracted text expire after seven days. Saved reports retain their cited excerpts until you delete the check. Optional evidence library files follow the retention period you choose. Read our privacy and retention information before uploading.
Payments and operational actions
Stripe handles card details. Email and payment services have separate data paths. Consequential operational actions require human approval. Local AI processing does not establish the location of every network route, proxy or backup.
Raise a security concern
Use Help & support to find the account support form. Describe the issue without including passwords, secret keys or unnecessary document content.
Security is ongoing work
No automated safeguard guarantees complete protection, correct findings or compliance. The AI review remains a private pilot while we validate accuracy. We review dependencies and security checks as the product changes.