How your documents are handled

Tender Helper sends the pages it needs to read to Anthropic's API to produce your scope of work. Anthropic does not train its models on data submitted through the API. We do not train anything ourselves, we do not use your documents to improve results for anyone else, and we do not share them with any other customer.

What crosses to the API is the text of the pages within the scope you set, and — for drawings — the rendered sheet images. Nothing else: not your takeoff measurements, not your pricing, not your other tenders.

Uploaded PDFs are stored in DigitalOcean object storage in the Toronto (tor1) region, and the database sits on a server in the same region. Nothing about your tenders is stored outside Canada.

On the desktop app the working copies stay on your own machine: once a document is downloaded, the takeoff reads it locally and the server sees only small updates to your measurements. That is the reason the desktop build exists.

Only people you have added to your account. Every request is scoped to your organisation at the database layer, and a request for a record belonging to another account is answered as if the record does not exist.

Passwords are stored as argon2id hashes — we cannot read yours, and neither could anyone who obtained a copy of the database. Sessions are opaque tokens in an HttpOnly cookie; only their hash is stored, so a database backup contains nothing that can be replayed as a login.

The database is backed up daily and backups are kept for 30 days. Uploaded files are stored durably rather than backed up separately — object storage keeps its own copies.

On a trial that ends without a plan, the account goes read-only and stays fully readable. The original PDFs are removed 30 days after that, and we email you before it happens. Everything you built — your scope of work with its citations, RFIs and every takeoff measurement — is kept regardless.

You can delete any document or tender from the app at any time, which removes the stored file. To delete an entire account and everything in it, get in touch and we will remove it — including from backups as they age out of the 30-day window.

Tender Helper reads tender documents and produces a draft scope of work with a citation for every item. It is a drafting tool, not a guarantee. Every item is shown with the document and page it came from precisely so it can be checked, and the Export tab will verify that each cited page actually contains what the item claims — but the estimator, not the software, is responsible for what goes in the bid.