Your bid information belongs to you
Construction bids carry confidential pricing that you have promised your subcontractors to protect. Here is exactly what happens to them:
- Your bids are used only to level them for you, at your request
- They are never used to train machine-learning models — by us or by any service provider we use
- Never sold, and never shown to other bidders, other subcontractors, or other companies
- Uploaded files are deleted automatically after 12 months, or when you delete them
- Ask us to delete your company and its data entirely, and we will within 30 days
- Bids emailed to a bid package’s address are accepted only from your own team, and the raw email is deleted within 30 days
The same commitments are in our Privacy Policy, which is the binding version.
Amazon Web Services, in the United States
MyLevelBid runs on Amazon Web Services in the US West (Oregon) region. Your documents and data are stored there and nowhere else we control.
- Encrypted in transit (HTTPS/TLS) between your browser and our servers
- Encrypted at rest — databases and uploaded files alike
- Point-in-time recovery on our databases, so a bad write can be rolled back
- Card payments handled entirely by Stripe; your card number never reaches our servers
A current list of service providers is available on request.
Only your team sees your bids
Every request for your data is checked on our servers against the company the person belongs to, not just hidden in the interface.
- Company-level separation: one company can never read another’s projects or bids
- Roles for your team — owner, admin, user and viewer — enforced on the server
- Passwords of at least 12 characters with mixed character types
- Optional two-step sign-in with an authenticator app, under Settings → Account
- Access decisions logged, so we can see who reached what and when
Access to production systems on our side is limited to the people who run the platform.
Where we stand, plainly
MyLevelBid is not SOC 2 certified yet. We are a young company and would rather say so than imply otherwise.
- Send us your security questionnaire and we will answer it
- Happy to walk your IT team through how the platform is built
We will list certifications here when we hold them, not before.
If something goes wrong
No system is free of risk. If we become aware of a security incident affecting your data, we will:
- Investigate and contain it
- Work out what information was affected
- Notify you promptly, and as applicable law requires
- Tell you what we changed so it does not happen again
Report a suspected issue to the security address below and it reaches the team directly.