Pre-launch: all Zest+ services are by application only due to demand. Apply for access
Zest+ Bids · Security

Your bid stays your business.

Bid content is commercially sensitive, and the panel needs to trust that what they see is what you submitted. So every Zest+ Bids build is private by default and frozen at the deadline.

Security

Three promises on every build

Bid content is commercially sensitive, so every Zest+ Bids build is private by default.

Private by default

  • Password-protected links
  • Hidden from search engines
  • Access switched off when you say so

Only the people you share it with can see it.

Frozen at the deadline

  • Locked when you submit or present
  • What the panel sees is exactly what you sent
  • A matching PDF for the record

Submitted content is frozen at the deadline. We may make essential security or availability fixes, but the bid content itself can't be changed.

Careful with data

  • No personal data on bid sites: roles, not names, and no salaries
  • Illustrative data always clearly labelled
  • Your tender documents are only used for your bid
Zest holds Cyber Essentials
The life of a build

Controlled from first draft to switch-off

  1. Draft

    Built behind a password, visible only to your bid team and ours, and hidden from search engines.

  2. Review

    Your team checks every page. Our people test every click and check every figure is labelled correctly.

  3. Share

    You decide who gets the link and the password, and when.

  4. Freeze

    Locked when you submit or present, with a matching PDF for the record. The bid content can't be changed after the deadline; only essential security or availability fixes are made.

  5. Switch off

    Access is switched off when you say so. The content is yours, and you always keep the PDF.

Data and AI

The questions procurement will ask, answered

If your procurement or IT team needs more detail, we're happy to go through any of this with them.

Which AI reads the tender?

We use Anthropic's Claude, on a commercial business plan, to read tender packs and pull out the sites, KPIs, SLAs, evaluation criteria and deadlines. People decide what's shown, design the build and check every line.

Is my data used to train AI?

No. Under Anthropic's commercial terms, inputs and outputs aren't used to train its models by default, and we don't opt in. We never put tender content into free, consumer AI tools.

How long do you keep my tender pack?

Six months after your deadline, then the tender pack and build files are deleted. Your PDF of the build is available to download before then, and it's yours to keep.

Who can access it?

Only the Zest team working on your bid. Bid sites sit behind a password, are hidden from search engines and are switched off when you say so.

Who are your subprocessors?

Anthropic for AI processing, and Hostinger for hosting bid sites and email. A full list is available on request, and we'll tell you before adding any new ones.

Will you sign a DPA?

Yes. We're happy to sign a data processing agreement, or to work with yours. Zest also holds Cyber Essentials.

What we will and won't put on a bid site

Careful by design

What goes on
  • Roles and responsibilities
  • Site lists, services and hours from the tender
  • Your approach, mobilisation plan and commitments
  • Illustrative performance data, clearly labelled
What stays off
  • Names and personal data of your staff
  • Salaries and TUPE details about individuals
  • Anything presented as real performance before award
  • Your tender documents, beyond what your bid needs
Zest+ what you need

Let's talk about your next bid.

Tell us what's coming up and when it's due, and we'll show you what Zest+ Bids could build for it.