Security & Your Data
WinFed asks you to put past performance, win themes, and pricing approach into the product. That is sensitive competitive material. Here is precisely how it is handled.
Your proposal content, Library entries, and pricing approach are sent to the AI model to generate your drafts — and nothing else. They are never used to train or fine-tune models, and never surface in another customer’s results.
Every record is scoped to your organization and enforced at the database level with row-level security, not merely hidden in the interface. Server routes that operate with elevated privileges verify organization ownership before returning anything.
All traffic runs over TLS. Stored records and uploaded solicitation documents are encrypted at rest by our managed Postgres and object-storage providers.
Payments are processed entirely by Stripe, a PCI-DSS Level 1 provider. Card numbers never reach WinFed servers. You can update payment methods or cancel at any time through the Stripe customer portal.
Matching and market intelligence are built on SAM.gov and USAspending.gov — public federal data. Researching an opportunity in WinFed does not disclose your interest to the issuing agency, an incumbent, or a competitor.
Request a full export of your account or its deletion and it will be handled directly — by the founder, not a ticket queue. Deleting your account removes your organization’s workspaces, opportunities, proposals, and Library content.
WinFed is an early-stage product built by one engineer. We do not hold SOC 2, FedRAMP, or CMMC certification today, and we won't imply otherwise. WinFed is intended for unclassified business development work — opportunity research, capture planning, and proposal drafting. Do not upload classified material, CUI you are not authorized to store in commercial cloud services, or anything restricted by a contract clause or NDA you haven't cleared.
Have a security question, or a requirement your organization needs met before it can adopt a tool?
Email the founder directlySee also our Privacy Policy and Terms of Service.