Security at BidOS

Your tenders and company documents are commercially sensitive. BidOS is built with strict multi-tenancy from day one.

Tenant isolation

• Every record is scoped to your organisation, enforced both in application code and with database row-level security.
• Documents are stored in private object storage and served only via short-lived signed URLs.
• Your documents, embeddings and generated content are never visible to any other customer.

Encryption & access

• All traffic is encrypted in transit (TLS 1.2+); data is encrypted at rest.
• Uploads are validated by type and size, and rate limits protect all sensitive APIs.
• Audit logs record security-relevant actions.

AI processing

• Uploaded document content is treated strictly as data, never as instructions to the AI.
• Your data is not used to train global AI models.

Questions? Contact security@bidos.example.