01
Verify it yourself
Certifications, controls, and sub-processors, live. Download documents instantly.
02
Discuss it in confidence
Penetration test summary and system description, under NDA.
Public data belongs under European control
Tender documents contain sensitive information: bidders’ plans and prices, evaluators’ scores and the reasoning behind an award. Protecting it takes more than a promise. Your data should be governed by European law.
Tenpu runs on European infrastructure. OVHcloud hosts the platform, while open AI models run through Scaleway. Your procurement data is stored and processed in Europe. The models are publicly available, so their availability cannot simply be withdrawn.
Responsible AI, by design
The AI model receives the information needed for a specific task, returns a suggestion and retains nothing. The model provider stores none of it, and the model keeps no memory of it.
01
No training on your data
Data from your tenders is never used to train or improve AI models.
02
Completely separated environments
Each organisation works within its own secure environment. Data is never shared with other clients.
03
Transparent AI
Every AI-generated suggestion can be verified, including source references and the information used.
04
No sale or sharing of data
Your data remains your organisation's property and is never sold or shared with third parties.
05
Delete data whenever you want
Data can be deleted at any time in line with the agreed retention periods and procedures.
06
Always in control of the outcome
AI supports the process, but you always stay in control. Suggestions are clear, customisable and easy to check.
Your data stays yours
Never shared. Never sold. Never used for anything beyond your procurement.
Export your complete tender file whenever you need it, in open formats such as PDF and CSV. When your contract ends, we delete your data within 60 days and confirm it in writing. You choose whether your data stays with Tenpu.
Tested annually. Evidence included.
01
ISO 27001:2022, with independent audits of how security controls are designed, implemented and operated.
02
External penetration testing across the full platform, including the separation of each organisation’s data.
03
After the audit, receive the current certificate, penetration test summary and supplier declaration for your own compliance records.
Prefer everything in one email? The security package: certificate, model data processing agreement, sub-processor list and privacy statement.
Within one working day.
Security
Send us your questionnaire
Send your security requirements, DPIA questions or standard assessment form. We complete these every week. You’ll hear directly from the people responsible for security at Tenpu.
For any other security or privacy questions, too.