Security
Trust and enterprise readiness
BidGenX is designed to support enterprise governance and controlled handling of tender content.
OHG-IAM-2026-014- Tenant scope
- Northstar Identity Advisory
- Review role
- Response reviewer
- Evidence control
- Needs human review
- Recorded activity
- Proposal review requested ·
R-014
Controls
The controls you operate
Governance, access, and audit are controls your team runs inside its own tenant, not promises made on your behalf.
Tenant-scoped tender content
Tender content is scoped to your tenant and workspace access controls. AI data handling depends on the provider and deployment configuration selected for your environment.
Controlled review and export
Proposal workflows support defined review and approval controls before governed export. The exact policy and reviewer path depend on the configured workflow.
Source-aware response traceability
Requirements, mapped knowledge and response evidence can be kept connected so reviewers can inspect the basis for a response instead of relying on generated text alone.
Role-based access control
Access is granted by role. Sensitive tender content is only visible to the people who need it.
Version and activity history
Content versions, workflow decisions and reviewer actions are recorded where supported by the relevant feature, helping teams reconstruct how a response changed.
Upload security controls
The document pipeline supports malware scanning before processing. Scanner availability and failure handling are deployment concerns that must be verified for the selected release.
Frameworks and legal terms
Enterprise buyers commonly assess controls against ISO 27001, SOC 2 and GDPR requirements. References on this page describe product controls and legal context, not a claim that BidGenX currently holds those certifications.
We describe capability, not certification. Where enterprise buyers require formal terms, audit reports, or a data processing agreement, we handle those under contract.
Reporting a vulnerability
If you believe you have found a security issue in BidGenX, please report it privately to info@bidgenx.com. We acknowledge reports within two business days and will keep you informed as we investigate. A public disclosure policy is available on request.
A subprocessor list is available on request under NDA.
Enterprise controls without hiding the workflow
Tenant-scoped access, review controls, AI configuration, auditability and deployment choices are treated as part of the operating model, not marketing badges.
Review the controls with your security team
Review the public controls here, then use paid consultation when you want a guided security or deployment discussion.
Not ready for paid consultation? Email info@bidgenx.com with your questions.