Security

How we handle your documents

Bid documents are sensitive. Here, in plain language, is where yours go and who can see them.

Where your files are stored

The files you upload are stored in a private Supabase Storage bucket. It isn't publicly readable.
The text we extract from your documents, the analysis results, and your document-chat questions and answers are stored in our Supabase Postgres database.
When you open a PDF in the app, we create a temporary download link that expires after one hour.

Other users can open a project and its files only if they are signed in and have access to that project: the project's owner, people added to the project, and members of your organization who have access to all of its projects.
Every database table that holds your project data has Postgres row-level security turned on, so requests made with your login are also checked by the database.
DeadFront's founder can access projects for support and operations.

Nothing in the app makes a customer project public. The analyses on our public bids pages come only from projects we create ourselves from bid documents posted at a public URL, and each one records that URL.

Analysis runs on Anthropic's Claude models through the Anthropic API. That includes extracting requirements, scoring risk, writing the bid brief, answering document-chat questions, and reading scanned pages.
To make your documents searchable, passages of document text, the requirements we extract and our analysis of them, and your chat questions are sent to OpenAI's embeddings API, which turns them into search vectors that we store with your project.
If Claude is unavailable while answering a chat question or writing a bid brief, the request and the relevant passages are sent to OpenAI as a backup.
We call both services from our own servers with our own API keys. No other AI service receives your documents.

We keep your uploaded files, the text extracted from them, the analysis, and your chat history so they're there when you come back. Nothing is deleted automatically on a schedule.

Email mike@deadfront.ai. You'll get an answer from the founder.