Trust & security
What’s protected today — and what isn’t yet.
Government work needs straight answers about security. This page lists what is in place, what is in progress and who handles your data. We update it when anything changes.
Controls
Current status
AreaStatusWhat it means
Tamper-evident activity recordIn placeEvery hand-off between steps is hashed (SHA-256) and signed (HMAC-SHA256), so a later change to the record can be detected. Records sealed since 25 September 2026 bind their full content; earlier ones bind only their top-level fields and are labelled legacy.
Three checks on every AI sentenceIn placeSource, citation and support checks run on each sentence. Anything that fails goes to a person instead of into the proposal.
Your data kept separateIn placeEvery request is checked against the organization that owns the data, and row-level security in the database blocks direct access to another organization’s records.
AI with rule-based backupsIn placeEach of the seven AI drafting steps has a rule-based fallback, and every use of it is logged as a warning. The three checks do not fall back: a sentence they cannot pass goes to a person.
EncryptionIn placeTraffic is encrypted in transit (HTTPS). Data is encrypted at rest by our hosting providers.
Human approval before submissionIn placeA named person approves each package on the approval screen. The approval is signed into the pursuit’s tamper-evident record and written to your activity history.
FedRAMP 20x ModerateIn progressAuthorization package in preparation. Bids2Bank is not FedRAMP authorized today.
SOC 2 Type IIPlannedIndependent audit planned. No SOC 2 report is available yet.
Customers can see their own signed record in Activity History. Open Activity History
Who handles your data
Service providers
Vercel
Hosts the website and application.
Supabase
Stores your data and handles sign-in.
Anthropic, OpenAI and Google
Process proposal text to draft and check sentences, through their commercial APIs.
Stripe
Handles subscription billing. Bids2Bank never sees full card numbers.
Government programs