Australian by default.
Primary infrastructure runs in the Sydney AWS region. Nothing leaves Australia without explicit configuration agreed with your team in writing.
TRUST · SECURITY
Built for the data your bids depend on.
Past projects, CVs, insurance certificates, pricing memory and bid/no-bid decisions are the operating record of how your business wins work — across federal, state, council and enterprise buyers. Tendor holds that record with the seriousness it deserves. The evidence library and workspace inherit every control on this page.
Trust pillars
TLS 1.3 and AES-256.
Every connection is TLS 1.3. Every byte at rest is AES-256 encrypted. Enterprise workspaces can bring customer-managed keys through AWS KMS.
SAML, OIDC, granular roles.
SAML and OIDC sign-on, granular per-workspace roles, and a mandatory audit log on every evidence read and every response export.
Cryptographically isolated workspaces.
Every workspace is cryptographically isolated at the storage and inference layer. No cross-tenant model training. Ever. Your evidence stays yours.
Certification on the roadmap.
ISO 27001 certification is being pursued through FY27, with SOC 2 Type 2 to follow. Marked here as roadmap — not claimed today.
We surface and structure. People decide.
Tendor supports the work — no automated submissions. Drafting is grounded in your evidence library and every claim is traceable back to its source document.
WHAT WE DON'T DO
Three lines we don't cross.
- We don't sell your data — not to brokers, not to ad networks, not to anyone.
- We don't train shared models on your evidence library, drafts, or pricing memory.
- We don't auto-submit anything. A human always signs off the response before it leaves Tendor.
SECURITY PACK
Want the full security posture in one document?
Architecture, residency, encryption, access control and our responsible AI position — in one pack, on request. Whitepaper landing soon.