Security & Trust

Trust Centre

Your security and privacy are our top priorities. Learn about our comprehensive security measures, compliance certifications, and data protection practices.

Document Library

Search Security Documents

Find and request access to our comprehensive security documentation

Enterprise Security Built for Trust

mytender.io implements industry-leading security measures to protect your sensitive tender data and maintain the highest standards of confidentiality.

Enterprise Grade Security

Bank-level encryption with AES-256 to protect your sensitive bid data

View Technical Details

Data Privacy Protection

GDPR compliant with comprehensive data protection and user rights

View Technical Details

Compliance Monitoring

Regular audits and compliance checks with industry standards

View Technical Details

Secure Document Handling

Encrypted storage and transmission of all tender documents

View Technical Details

Access Controls

Role-based permissions and multi-factor authentication

View Technical Details

Global Infrastructure

Secure hosting on certified cloud infrastructure worldwide

View Technical Details

Comprehensive Security Framework

Our multi-layered security approach ensures your tender data is protected at every level, from transmission to storage and processing.

Data Encryption & Protection

  • AES-256 encryption for data at rest
  • TLS 1.3 encryption for data in transit
  • End-to-end encryption for document uploads
  • Secure key management with HSM

Access Control & Authentication

  • Multi-factor authentication (MFA)
  • Role-based access control (RBAC)
  • Single Sign-On (SSO) integration
  • Automated session management

Infrastructure Security

  • AWS certified cloud infrastructure
  • 24/7 intrusion detection systems
  • Regular penetration testing
  • DDoS protection and WAF

Data Governance & Privacy

  • GDPR compliant data processing
  • Data residency controls
  • Automated data retention policies
  • Right to be forgotten compliance

Security Architecture Overview

Our comprehensive security architecture leverages AWS-native services to provide enterprise-grade protection for your tender data

User Access
HTTPS/TLS 1.3
AWS CloudFront CDN
Global Edge Locations
Application Load Balancer
WAF Rules & Security Groups
VPC Private Subnet
Network Isolation
mytender.io Application
Secure Processing Core
AWS Cognito
Authentication & MFA
AWS RDS
PostgreSQL Encrypted
AWS S3
Document Storage
AWS CloudTrail
Audit Logging
AWS GuardDuty
Threat Detection
AWS Config
Compliance Monitoring
AWS KMS
Key Management & Rotation

24/7 Security Monitoring

Our security operations centre continuously monitors all systems for threats and anomalies

Real-time Threat Detection

AI-powered monitoring systems detect and respond to security threats in real-time

Incident Response

Dedicated security team responds to incidents within 15 minutes of detection

Audit Logging

Comprehensive audit trails for all data access and system activities

Enterprise Deployment Options

Four Security Tiers for Every Requirement

From fully managed cloud to complete on-premise isolation, choose the deployment model that matches your organisation's security requirements.

1

Fully Managed

Our default deployment

mytender.io hosts application
mytender.io hosts database
External LLM APIs (inference-only)

Best for: Commercial enterprises, non-classified bids

2

Client Database

Data sovereignty option

mytender.io hosts application
Your infrastructure hosts database
External LLM APIs (inference-only)

Best for: Data sovereignty requirements

3

Client Hosted

Full infrastructure control

Your infrastructure hosts application
Your infrastructure hosts database
External LLM APIs (inference-only)

Best for: Government contractors, sensitive data

Most Secure
4

Complete Isolation

Amazon Bedrock LLMs

Your infrastructure hosts application
Your infrastructure hosts database
Amazon Bedrock LLMs in your AWS

Best for: Defense contractors, classified programs

Key Security Guarantees Across All Tiers

Zero Training Guarantee

Your data is never used to train AI models—ever. Inference-only processing with contractual guarantees from all LLM providers.

CREST Pen Test Approved

Higher security standard than Cyber Essentials. Independently verified penetration testing by CREST-accredited professionals.

Defense-Ready Options

Tier 4 supports ITAR compliance, IL4/IL5 requirements, and NATO SECRET classifications with appropriate approvals.

mytender.io is reviewed and trusted by

Leading organisations across the UK trust mytender.io with their most sensitive tender data

Suez
Empro
Graduam
SCG
Affinity Digital
Robidco
Killingley
LMC
Cargepoda
Civica
Identifier
Spiritfire
Stantbury
WSP