Security and data handling
DefenceContractors holds only public procurement data and the account data of its customers. It stores no classified material, no export-controlled technical data and no weapon specifications, by design. Customer data travels only over encrypted connections, is hosted in the European Union and is visible only to the customer's own team.
What we never hold
The data set is built so that a breach of our systems could not expose sensitive defence information.
- No classified or restricted documents, at any marking.
- No technical data covered by ITAR, EAR or EU dual-use rules.
- No technical characteristics of weapons or munitions.
- Nothing taken from behind the login of a procurement portal.
- No private contact details of people, only business roles with a public source.
Controls on every plan, and more on Enterprise
Encrypted connections
HTTPS on every page and every API call, with servers and backups in the European Union.
Account security
Addresses confirmed with a code, passwords stored as one-way hashes, limits on sign-in attempts and reset links that expire after an hour.
Team isolation
Capability profiles, saved items and exports belong to your team and are never shown to other customers or used to train models.
Roles
Owner, admin and member roles decide who manages billing, profiles and seats.
Single sign-on and audit log
SAML single sign-on with your identity provider and an audit log of sign-ins, exports and changes to profiles and keys.
DPA and availability
A data processing agreement in the account and a 99.9 percent monthly availability commitment in the terms.
How AI briefings treat your data
Briefings summarise public notices for paying teams. The model receives the public text of the notice and the capability description you wrote, nothing else, and providers we use do not train on it.
Reporting a problem
Found a vulnerability or a record that should not be public? Write to support@defencecontractors.com and we reply within two working days.