Trust Centre
Your tender data — secure, private, and fully controlled.
All data is securely hosted within AWS infrastructure in Sydney (ap-southeast-2), with enterprise-grade encryption, strict access controls, and secure AI processing. Additional regions can be supported based on customer requirements.
Infrastructure
Enterprise-grade infrastructure.
AWS Sydney Region
Data is securely stored within AWS infrastructure in Sydney, Australia (ap-southeast-2).
Encryption in transit
All traffic is protected with TLS 1.2 / 1.3.
Encryption at rest
Stored data is encrypted with AES-256.
Multi-AZ redundancy
High availability across multiple availability zones.
Daily backups
Daily encrypted backups keep your tenders safe.
Continuous monitoring
Continuous monitoring & logging across the platform.
Access control
Role-Based Access Control
Control who can view, create, edit and manage content across Tenderfy. Role-based permissions help ensure users only have access to the information and functionality appropriate to their role.
Access & data control
You decide who sees what.
- Role-based access with granular permissions
- Private tenancy per organisation
- Multi-factor authentication (MFA)
- Single Sign-On (SSO) support
- Audit logging
- Strict internal access controls
- No cross-customer data visibility
AI safety
Secure, isolated AI.
Tenderfy's AI assistant operates within strict privacy boundaries. Your data is never used to train public or third-party models, and it's isolated per organisation with no cross-customer access — AI runs through enterprise-grade provider APIs under contractual no-training protections.
- No customer data used for AI training
- No cross-tenant data access
- Secure, isolated processing
- AI outputs logged for transparency
- No external data sharing
Compliance
Aligned with recognised security frameworks.
Tenderfy's security practices align with ISO 27001 and SOC 2 principles, with ongoing internal reviews and continuous improvement as we scale.
Security documentation
Access detailed security policies on request.
We provide detailed security and compliance documentation aligned with industry best practices. Access can be requested through our secure process.
Information Security Policy
Request AccessBusiness Continuity & Disaster Recovery Policy
Request AccessIncident Response Policy
Request AccessData Protection & Privacy Policy
Request AccessAccess Control Policy
Request AccessAI Usage & Safety Policy
Request AccessRisk Management Framework
Request AccessSecure Development Practices
Request AccessQuestions about security?
Talk to our team — we’re happy to walk through our controls in detail.