Security Centre

Data security and privacy is at the heart of Tender Copilot's core values. Choosing the right infrastructure partner is critical, which is why we ultimately host on AWS, a provider that meets international security standards and matches our own high standards for data security and privacy.

Compliance with industry standards and regulations

AWS is certified under a range of internationally recognised compliance frameworks, providing a robust infrastructure for every Tender Copilot client. Key standards include:

• ISO 27001:2022 – this international standard for information security management ensures robust controls for data handling and storage, crucial for construction firms dealing with confidential contract details.
• UK GDPR – our hosting infrastructure supports handling personal and commercial data in line with UK and EU data protection regulations, reducing the risk of penalties for non-compliance.
• Cyber Essentials – many UK public sector contracts require Cyber Essentials certification. Our security posture is built to support compliance with these guidelines, so companies using Tender Copilot can meet minimum cybersecurity requirements.
• NIST Cybersecurity Framework – a globally respected standard for security and risk management, supporting structured security controls, proactive threat detection and resilience against cyber threats.

Because Tender Copilot is ultimately hosted on AWS, we inherit the benefits of these compliance certifications, streamlining adherence to industry regulations and best practice.

How we protect your data

Multiple layers of security work together to safeguard your data, so you can securely store, process and share sensitive tender information:

• Data encryption – end-to-end encryption for data at rest and in transit, ensuring confidential project data remains protected from unauthorised access.
• Network security – an advanced network architecture including firewalls, distributed denial-of-service (DDoS) protection and intrusion detection systems, reducing the risk of cyberattacks.
• Identity and Access Management (IAM) – role-based access control ensures only authorised personnel can access specific documents, preventing internal data leaks and improving accountability.
• Continuous monitoring – our infrastructure is monitored 24/7 to prevent and respond to potential threats proactively.

Reliability you can depend on

Our hosting is built on robust and redundant data storage systems, designed to ensure your data is always available and safeguarded against loss. This reliability is backed by industry-leading uptime and data durability guarantees.

Working with data responsibly

Only members of your own organisation, or a member of our support team acting with your permission, can access your data. And your data is never used to train third-party AI models: we have agreements in place with our AI partners to keep it that way.

Choosing AWS as our hosting partner means construction companies get a secure, scalable and compliant solution for bid management. Extensive security certifications, robust encryption and global infrastructure provide the reliability and compliance needed for handling sensitive data, so your team can focus on winning contracts with confidence.