Security & Your Data
WinFed asks you to put past performance, win themes, and pricing approach into the product. That is sensitive competitive material. Here is precisely how it is handled.
To produce your analysis and drafts we send the AI model your Company page, workspace profile, and the solicitation documents attached to the opportunity — and nothing beyond what that task needs. None of it is used to train or fine-tune models, and none of it surfaces in another customer’s results.
Every record is scoped to your organization. Row-level security enforces that at the database level rather than hiding it in the interface, and the server routes that run with elevated privileges verify organization ownership before returning anything. We audit these paths as the product changes and fix what we find.
All traffic runs over TLS. Stored records and uploaded solicitation documents are encrypted at rest by our managed Postgres and object-storage providers.
Payments are processed entirely by Stripe, a PCI-DSS Level 1 provider. Card numbers never reach WinFed servers. You can update payment methods or cancel at any time through the Stripe customer portal.
Matching and market intelligence are built on SAM.gov and USAspending.gov — public federal data. Researching an opportunity in WinFed does not disclose your interest to the issuing agency, an incumbent, or a competitor.
Solicitation attachments, key personnel resumes, and certification files are stored in our managed object storage and used only to analyze that opportunity or build your proposal. If you need a document removed, email us and it is deleted.
Request a full export of your account or its deletion and it will be handled directly — by the founder, not a ticket queue. Deleting your account removes your organization’s workspaces, opportunities, proposals, and everything on its Company page.
WinFed is an early-stage product built by one engineer. We do not hold SOC 2, FedRAMP, or CMMC certification today, and we won't imply otherwise. WinFed is intended for unclassified business development work — opportunity research, capture planning, and proposal drafting. Do not upload classified material, CUI you are not authorized to store in commercial cloud services, or anything restricted by a contract clause or NDA you haven't cleared.
Have a security question, or a requirement your organization needs met before it can adopt a tool?
Email the founder directlySee also our Privacy Policy and Terms of Service.