We do not use customer data to train models.
Propagent security and procurement
Security, privacy, and responsible AI by design.
At a glance
We do not use customer data to train models. Propagent offers tenant-isolated cloud hosting, with on-premises and local-cloud deployment options. The system is built with GDPR requirements, SOC 2 Trust Services Criteria, ISO/IEC 27001, and ISO/IEC 42001 in mind. People remain responsible for judgment and final approval.
Customer data is isolated by tenant.
Cloud, on-premises, and local-cloud options for your firm.
Your firm’s data
Clear answers for your IT and proposal teams.
Review the retention periods, deletion process, and backup handling for your deployment with our team. We also work through your data-location, access, and service-provider requirements during procurement.
| Question | Propagent’s approach |
|---|---|
| Is our data used to train models? | We do not use customer data to train models. |
| Where can we run Propagent? | Propagent offers tenant-isolated cloud hosting, with on-premises and local-cloud deployment options. |
| How are retention and deletion handled? | Our retention and deletion policies follow GDPR principles. Personal data is retained only for as long as necessary for its purpose, subject to applicable legal requirements. |
Standards-informed design
A foundation for your firm’s review.
Propagent’s system design accounts for information-security risk management, privacy, and AI governance. These reference points inform how we approach the product.
Propagent is not currently ISO-certified and does not claim independent SOC 2 assurance. These references describe our design approach, not third-party certification.
| Reference | Focus |
|---|---|
| GDPR | Personal-data protection, including privacy by design and data minimization. |
| SOC 2 Trust Services Criteria | Evaluating controls relevant to the services a customer relies on. |
| ISO/IEC 27001 | Managing information-security risks and organizational responsibilities. |
| ISO/IEC 42001 | Managing AI-related risks, responsibilities, and ongoing oversight. |
Inside the pursuit workflow
Evidence stays visible. Decisions stay with your team.
- Source-grounded responses connect claims to the firm evidence behind them.
- Missing facts and conflicting information remain visible for expert review.
- People resolve sensitive questions, validate commitments, and approve the response.
- Approved pursuit knowledge preserves the context behind the finished document.
Controlled diligence
Get the detail your review requires.
Propagent provides current, customer-relevant facts about controls and the data lifecycle. When available, appropriate, and required, Propagent shares sensitive architecture, testing, or customer-specific material through a controlled diligence process.
The review distinguishes current capabilities from planned work and identifies open items directly, so your team can make an informed procurement decision.
Where your team stays in control
Customer administrators control what firm data enters the system and who is authorized to use it. People remain responsible for reviewing sensitive outputs and approving external submissions.
Frequently asked questions
Straight answers for your evaluation.
Does Propagent use customer data to train models?
No. We do not use customer data to train models.
What hosting and deployment options are available?
Propagent offers tenant-isolated cloud hosting, with on-premises and local-cloud deployment options.
What is Propagent’s approach to retention and deletion?
Our retention and deletion policies follow GDPR principles. Personal data is retained only for as long as necessary for its purpose, subject to applicable legal requirements. Review the retention periods, deletion process, and backup handling for your deployment with our team.
Is Propagent ISO-certified or independently SOC 2-assured?
Propagent is not currently ISO-certified and does not claim independent SOC 2 assurance. Its system design accounts for GDPR requirements, SOC 2 Trust Services Criteria, ISO/IEC 27001, and ISO/IEC 42001. These references describe the design approach, not third-party certification.
What security information does Propagent provide for review?
Propagent provides current information relevant to data flow, hosting, access controls, encryption posture, retention, deletion, backups, subprocessors, incident contact, and procurement. It also identifies which contractual documents and certifications are currently available.
Why does proposal data require special care?
It can contain confidential client, employee, project, pricing, contract, partner, and active-pursuit information that affects both commercial and professional obligations.
How does Propagent handle sensitive security detail?
Your team receives clear control and data-lifecycle information. Propagent shares sensitive topology, detection methods, testing artifacts, and customer-specific details only when those materials are available and appropriate for the diligence process.
How can I complete a Propagent security review?
Email Propagent with your firm-specific questionnaire, diligence priorities, and contractual requirements to receive current review materials and coordinate follow-up questions.
See it on real work
Start the security review Start a security review
Send us your questionnaire or diligence requirements. We will provide the current Propagent materials and work through open questions with your team.