Security, retention and limits

Isolation and hosting

One tenant per workspace: separate storage prefixes, row-level isolation, separate encryption context. Google Cloud, asia-east1 by default (EU/US on request). TLS 1.2+ in transit; encryption at rest; Cloud SQL point-in-time recovery.

Retention

Library retained for the life of the workspace. Tender packages and outputs default 730 days (bid validity and award cycles are long), configurable 90–2,555. Deletion within 30 days; backups roll off within 35. Usage ledger and audit log 2 years.

Access

SSO (Google, Microsoft) on Multi-line and Enterprise; magic-link email otherwise. Roles: bid manager, proposal engineer, engineer, QA, commercial, read-only. Our operational access is limited, short-lived and logged.

Model providers

Google Vertex AI by default via our channel, or your own key. Package and library excerpts are sent for the request in hand under enterprise terms that exclude training.

Deliberate limits

• Never submits a bid or communicates with a buyer.
• Never assigns Comply without a cited document.
• Does not interpret standards from memory; reads only texts you upload.
• Does not interpret drawing geometry.
• Pricing, legal terms and contract conditions are out of scope.

Vulnerability reports

[email protected]; acknowledged within two business days.

Policies

Privacy policy, terms, DPA and sub-processor list are published once at carnegieintel.com and apply to this product.