Security and Compliance

Protecting your information. Keeping people accountable.

Your information stays yours.

We handle your bid documents, commercial information and supporting evidence for the work agreed with you. Client confidential material is not shared or reused for other clients. The engagement agreement sets out ownership, permitted use, confidentiality and retention.

Access is tied to the work.

Our platform uses authenticated accounts, company and team memberships and data-access rules to govern access to information. These rules operate at the data layer. We use HTTPS to protect information in transit. We agree who needs access for an engagement and expect everyone working on it to respect those boundaries. Internal supplier intelligence is kept separate from customer-facing access.

Responsible AI. Human oversight.

We use AI to analyse documents, organise evidence and prepare responses. Bashido remains accountable for the work. Human completeness and accuracy checks are required for bid outputs.

Clear purpose and boundaries

We use information within the agreed purpose and permissions for the engagement. Confidential material is handled within those boundaries, including when choosing what to provide to an AI service.

Evidence checked by people

AI can miss requirements or produce inaccurate information. We check bid outputs against source documents and client evidence, challenge unsupported claims and review for misleading assumptions. Generated content is not treated as verified fact.

People make the decisions

Our team reviews the proposed response and action. You approve your commercial commitments. AI outputs do not replace those approvals or give Bashido authority beyond the engagement agreement.

Know where information is processed.

Our platform uses UK and EU cloud services. AI providers can process information outside those regions, including in the United States. We discuss the providers and data flows relevant to your engagement, including any restrictions on sensitive information, before work begins. The applicable arrangements cover confidentiality, access, permitted processing and retention. We assess specific requirements with you so that the agreed scope reflects your information and procurement obligations.

Clear responsibility. A direct route for concerns.

Our founders are responsible for our approach to information handling and responsible AI. Raise a concern about access, confidentiality or an AI output with your Bashido contact. We investigate the issue and decide what correction or change is needed. If your organisation needs security evidence or has specific supplier requirements, discuss them with us before the engagement. We explain the arrangements that apply and provide the evidence available for those requirements.