Assurance

AI, data and confidentiality

Technology may assist a controlled task. It does not own source truth, commercial judgement, delivery promises or final approval.

Current public website

No chatbot. No hidden model call. No diagnostic upload.

The public interface is static HTML, local styling and restrained browser JavaScript. The Bid Strengthening Plan applies visible deterministic rules on the visitor’s device.

Reading

Ordinary pages

Do not require an account, analytics identifier or AI request. Hosting security logs are addressed in the privacy notice.

Diagnostic

Browser-only plan

Answers are evaluated locally and are not saved, transmitted or turned into a win probability.

Inspect the diagnostic
Submission

Minimal contact first

The public form accepts only a name, email and message. Confidential documents move through a separately agreed route after the initial conversation.

Start a conversation

Required control set

Eight questions before technology touches client material.

A popular provider or enterprise label does not answer these controls. Approval applies to the exact task and configuration.

01

Purpose

Name the task, decision and why technology is needed before material is processed.

02

Data boundary

Classify, minimise and remove credentials or unnecessary personal/confidential information.

03

Provider

Approve model, processor, region, sub-processors, contract, retention and training settings.

04

Evidence

Constrain factual work to authorised sources and preserve source-to-output traceability.

05

Human review

A competent person checks facts, inference, compliance, bias, risk and usability.

06

Authority

The client approves claims, price, partner, legal position, risk and every binding commitment.

07

Access and retention

Limit roles, record access, apply the approved deadline and evidence deletion.

08

Incident route

Stop use, preserve proportionate records and escalate suspected disclosure or corruption.

Human approval is a control—not a slogan

Review must be performed by someone competent for the subject and authorised for the decision. They need the source packet, model or tool context, prohibited inference, uncertainty and acceptance criteria. A person clicking “approve” without checking those things does not cure a weak process.

  • Buyer requirements are checked against the live procurement record.
  • Claims resolve to approved evidence and permitted wording.
  • Commercial and delivery commitments reconcile with price, resource and risk.
  • Legal, regulatory, security and specialist matters go to competent advisers.
  • Generated text is challenged for unsupported certainty, omission and source distortion.

Confidential files

Do not paste tender files, credentials, unnecessary personal data or client evidence into an unapproved consumer tool. The website contact route deliberately accepts no file upload. Bid Champions agrees the appropriate document exchange and processing boundary before confidential material is transferred.

Training, retention and deletion

No blanket statement is made about all future providers. For each approved service, Bid Champions must document whether submitted material is retained, used to improve/train a model, reviewed by provider personnel, transferred, cached, logged or available through support access. Contract and configuration evidence must support the public statement. Deletion must include provider and local copies to the extent contractually and technically available, with lawful exceptions recorded.

What the technology may not decide

A model does not decide whether the bidder meets a mandatory condition, owns a certificate, has a permitted partner, can accept liability, should submit a price, may make a legal claim or can deliver an outcome. It may assist analysis or drafting inside an approved process; the evidence and authority determine the decision.

Raise a concern

Email info@bidchampions.com without attaching confidential material. For suspected exposure, use “urgent data security issue” in the subject and follow the incident guidance in the privacy notice.