Your bid library is your competitive edge, and the product is built to treat it that way. This page is the short version; the security page, the privacy policy and the terms of service say it formally, and all three change in the same commit as the stack does.
Where your data lives
Everything at rest is in Google Cloud's London region: the database, your uploaded documents, extracted text, embeddings and backups. Four processing steps leave that region, and they are named rather than implied away: drafting prompts — which include passages from your documents — route via OpenRouter in the US; any uploaded file may be parsed by Reducto in the US; Google's ranking service, which re-orders retrieved passages before drafting, is a global endpoint; and the web front end, which builds every page you see from the API's answers and carries what you type, upload and download to and from it, runs in Google Cloud's Belgium region, inside the EEA. The front end keeps nothing on disk. To keep pages quick it holds working copies of some workspace details in memory — your company profile and settings, your library list, and the titles of your tenders and questions — refreshed as you work and discarded when the server is replaced; your documents, drafts and answers are never kept there. Programs using an API key talk to the API in London directly.
Training
Your data is never used to train models, and there is no model-training or fine-tuning code in WayWiser. Every request to OpenRouter carries a routing restriction limiting it to providers that do not retain or train on inputs — a routing control, not a signed no-training contract with each downstream provider, and the security page says exactly that.
Isolation
Every tenant-scoped record carries a company identifier enforced twice: row-level security in the database and explicit company scoping in every query. Content you upload is never added to the shared reference library other customers can search.
What WayWiser staff can see
Named WayWiser administrators can open customer workspaces to support accounts, investigate faults and manage the shared library. Each time one of them opens a workspace they are not a member of, an entry is written to that workspace's audit log and shown to its admins under Company settings, one entry per person per hour. Individual page reads inside the workspace are not itemised.
Deletion
A workspace admin can delete the workspace: a seven-day window, cancellable, then a nightly job erases the records, the uploaded documents and packs, any export archive, and the accounts of people who belonged to no other workspace. Encrypted backups expire after 7 days and prior versions of stored files after 30.
Certifications
WayWiser holds no security certifications today — not ISO 27001, not SOC 2, not Cyber Essentials — and says so on the security page. It will link a certificate when one is achieved, and not before.