Security & trust
Built to survive your own security review.
You answer security questionnaires for a living — you know what a real answer looks like versus a marketing page. Here is ours, stated plainly.
A source citation on every answer
Every drafted answer points back to the exact document and passage it came from. You can open the source in one click and verify it yourself — nothing ships unverifiable.
Your data is never used to train AI
Your documents, your drafted answers, and your uploaded RFPs are used only to serve your account. They are never used to train AnswerRFP's models or anyone else's.
Zero data retention on the model layer
Requests to the underlying language models are made under a zero-data-retention agreement — your content is not retained or logged by the model provider beyond serving your request.
Tenant isolation
Every organization's documents, answers, and library are isolated at the data layer. One tenant's content is never visible to, searchable by, or reused by another.
EU/US hosting
Infrastructure runs in the US by default, with an EU hosting option for customers who need to keep data in-region — a common requirement for European life-sciences buyers.
A DPA is available
A Data Processing Agreement is available on request for Team and Enterprise customers who need one for their own vendor-risk process.
Certification status
SOC 2 Type II — in progress
We’d rather tell you the truth than a marketing version of it: AnswerRFP is a young product, and our SOC 2 Type II examination is in progress, not yet complete. We’re building the controls a Type II audit expects from day one — tenant isolation, access control, encryption in transit and at rest — and will publish the report the moment it’s ready. If SOC 2 is a hard requirement for your vendor-review process today, tell us — we’d rather have that conversation early than after you’ve invested time evaluating us.
Questions for your security review?
Reach out and we’ll answer directly — no sales gate. A DPA, a completed questionnaire template, or just a straight answer from a human: email us and we’ll respond ourselves, not a bot.
security@answerrfp.ai