Privacy Policy
RFP Guard AI, engineered by Orient Solutions, is built on a fundamental premise: your tender documents, competitive pricing, and proprietary bidding strategies belong exclusively to you.
Last updated: October 2026
1. Zero AI Training Guarantee
Your files and prompts are never used to train public artificial intelligence models.
All LLM inference requests made by RFP Guard AI are executed under commercial enterprise agreements with zero-data-retention (ZDR) and strict opt-out from model training. Your tender documents, addenda, and queries are processed in ephemeral encrypted memory solely to generate your audit report.
2. Regional Data Residency & Sovereignty
We maintain physically segregated infrastructure deployments to satisfy strict data residency requirements across jurisdictions:
- European Union (EU) Region: All customer accounts, tender documents, SQL databases, and encryption keys for EU companies reside strictly within Microsoft Azure Germany West Central (Frankfurt) under full GDPR compliance.
- Gulf Cooperation Council (GCC) Region: Customers in the GCC (UAE, Saudi Arabia, Qatar, Kuwait, Bahrain, Oman) have their data isolated within designated regional cloud centers adhering to UAE PDPL and Saudi Arabia National Data Management Authority (NDMA) standards.
3. Information We Collect
We collect only the minimum data necessary to provide our tender review services:
- Account & Identity Information: Name, corporate email address, encrypted password, company name, and jurisdiction.
- Tender Documents: Tender specifications, instructions, conditions, and addenda uploaded by your users. These documents are encrypted both at rest (AES-256) and in transit (TLS 1.3).
- Billing & Payment Information: Payment processing is handled entirely by Stripe Inc. under PCI-DSS Level 1 compliance. We never store, process, or transmit credit card numbers on our servers. We retain only Stripe customer IDs, subscription status, and billing addresses for invoicing and tax compliance.
4. Data Sharing & Sub-processors
We never sell, rent, or monetize your company data. We engage only reputable, enterprise-grade sub-processors under strict Data Processing Agreements (DPAs):
| Service Provider | Purpose | Data Location |
|---|---|---|
| Microsoft Azure | Cloud infrastructure, encrypted storage, and regional SQL databases | EU (Germany) / GCC Regional Cloud |
| Stripe Inc. | PCI-DSS compliant payment processing and automated invoicing | Global / EU / US |
| Enterprise AI Inference | Ephemeral document clause analysis (Zero-Retention) | EU Dedicated Enterprise Endpoints |
5. Your Rights Under GDPR & Data Laws
Under the General Data Protection Regulation (GDPR) and applicable data protection legislation, you have the following rights:
- Right to Access & Portability: You can export all your tender audits, findings, and invoices at any time via Excel/PDF export buttons.
- Right to Erasure (Right to be Forgotten): Deleting a tender or requesting company account deletion permanently removes all associated files, extracted clauses, and audit logs from our databases and storage.
- Right to Rectification: You can edit user profiles, company details, and billing settings directly in your settings portal.
6. Contact Our Privacy Office
If you have questions, concerns, or requests regarding this Privacy Policy or your data protection rights, please contact our team:
Orient Solutions – RFP Guard AI Data Protection Office
Email: support@rfpguard.com
Parent Company: Orient Solutions (orient-solutions.com)