Security
Your RFPs carry your pricing. Here is how they are handled.
Who can see your documents, what the AI does with them and what to agree before you share a real bid. Written for the people in IT and Legal who will ask.
Your organization
North Harbor Operations Center Modernization
Documents · findings · decisions · pricing
- Bid teamEdits requirements, tasks and the response
- ReviewersReview the findings they own
- ApproversRecord the decision and the release
- Permitted roles onlySee pricing and financial details
What each role can do depends on the permissions your organization sets.
Who can see what
Everything belongs to your organization.
- Bids, files, findings, searches and exports are scoped to your organization. Every request checks who is asking and what their role allows.
- Roles decide who can review, edit and approve.
- Pricing and financial details carry extra visibility controls.
- Decisions and approvals are recorded with the person who made them.
What the AI does
Your documents are processed for your team, not for training.
- The AI reads your documents to produce findings for your organization.
- Uploaded documents are not used to train AI models. As the Privacy Policy states, they are shared with third parties only as necessary to provide the service.
- Every finding keeps its page, so a person can check it against the source.
- The AI recommends. It does not decide, approve pricing or submit.
From the Privacy Policy
What the published policy commits to.
Taken from the Privacy Policy, so your Legal team can check every line against the source.
An uploaded RFP, start to finish
Upload
Encrypted in transit (TLS) and encrypted in storage.
Analysis
Documents are not used to train AI models, and are shared with third parties only as necessary to provide the service.
Access
Files sit behind restricted access controls and time-limited signed URLs, with continuous security monitoring.
Retention
Documents and analysis results are kept for your subscription and deleted within 90 days of account termination. You can ask for earlier deletion.
Service providers that process your information are bound by data protection obligations. Personal information is not sold or used for advertising.
Before you share a sensitive RFP
Start with the sample. Agree the rest first.
The first walkthrough uses the synthetic North Harbor bid, so nothing real is shared until your requirements are clear.
Access and ownership
Who can review, edit, approve and see financial information?
Hosting and retention
Which location, retention and deletion requirements apply to your organization?
Contracts and vendor review
Which agreements and security evidence do your IT and Legal teams need?
Enterprise options
SSO, dedicated hosting and certifications are confirmed individually. Do not assume they are included.
Published policies
Read the policies your team will review.
- Privacy Policy
What we collect, how uploaded documents are processed, service providers, retention and your choices.
- Terms of Use
The terms for using ClearRFP, including your content, confidentiality and data security.
- Cookie Policy
Which cookies ClearRFP uses for sign-in, security and analytics, and how to manage them.
Bring IT and Legal to the walkthrough.
We answer their questions on the sample bid before any real document is shared.