Responsible AI & Data Handling

WinRFP AI is built to support proposal professionals — not to replace their judgment. This page explains, in plain language, how our AI works, what it is and isn't, how we handle your data, and what you remain responsible for. We'd rather be clear about this up front than bury it in fine print.

Last updated: June 21, 2026 · Questions: support@winrfpai.com

1. How WinRFP AI is meant to be used

Every output WinRFP AI produces is a draft and a decision aid — a faster starting point for a qualified human, never a finished answer. The tool does the reading, mapping, and first-draft work; you make the call. Each AI result is flagged for your review, and final professional judgment always stays with you and your team.

2. What our AI produces — and its limits

WinRFP AI's analyses — including RFP summaries, requirement extractions, compliance matrices, bid/no-bid recommendations, win-probability scores, resume matches, Pink/Red Team reviews, and proposal draft sections (draft text) — are automatically generated aids. Like any AI system, they can omit, misclassify, misinterpret, or incorrectly prioritize parts of a solicitation.

Because of this, you remain solely responsible for reviewing the complete solicitation — including all amendments, attachments, clauses, instructions, evaluation criteria, and submission requirements — before you rely on any output or submit a proposal.

Proposal draft sections are a first draft, not a final submission. Review and revise them in your own voice, with your company's real evidence and discriminators, before you submit — this strengthens the proposal and ensures it reflects your team rather than a generic template.

WinRFP AI does not provide legal advice, pricing strategy, or contracting judgment. Those decisions should always involve a qualified professional.

3. What WinRFP AI is — and isn't — for

A good fit

Not the right tool

4. Your data and your privacy

Never used to train AI. WinRFP AI runs on the Anthropic Claude API, which does not use API inputs or outputs to train its models. Your documents are processed only to generate outputs for you.

Encrypted in transit and at rest. All traffic is protected over HTTPS/TLS, and your documents are stored in Amazon S3 with AES-256 encryption at rest.

Stored in your workspace only. Knowledge-library documents live within your account and are not shared with other users. You can delete any file at any time from the Knowledge Library tab, which removes it from your workspace. When you close your account, your stored documents are deleted.

Vetted subprocessors only. We use a small set of providers for hosting, storage, payment, and AI infrastructure: Railway (application hosting), Amazon Web Services / S3 (document storage), Anthropic and OpenAI (AI processing), and Stripe (billing). Your files are never sold, licensed, or shared with other users.

Scoped for unclassified work. WinRFP AI is designed for public solicitations and internal, unclassified proposal materials.

The Knowledge Library is your private vault of company documents — capability statements, past performance, résumés, certifications, and pricing — that the AI draws from when it analyzes an RFP and drafts your proposal. See where it fits in the workflow →

Full details are in our Privacy Policy and Terms of Service.

5. What you can — and can't — upload

Safe to uploadDo not upload
Public RFPs and solicitationsClassified information
Capability statementsControlled Unclassified Information (CUI)
Past-performance write-upsExport-controlled (ITAR / EAR) material
Résumés and CVsRestricted government data
Pricing templates and certificationsPII beyond what a résumé requires

"Safe to upload" means content that isn't classified, CUI, or export-controlled — not a measure of how much the tool uses it. Pricing materials (rate cards, cost narratives) are used only as context for drafting and readiness scoring; WinRFP AI does not calculate your price or a Price-to-Win.

6. On outcomes — an honest word

No tool can guarantee you'll win a contract. WinRFP AI helps you respond faster, qualify smarter, and produce a stronger first draft — but the quality of your final proposal, and the decision to submit it, rests with your team. Always have a qualified professional review before submission.

7. Where we are on security & compliance

We believe honesty here builds more trust than badges do. We design our controls toward recognized standards — OWASP ASVS and NIST SP 800-171 — as a north star, and we encrypt your data in transit and at rest.

At the same time, we are clear about what we have not done: WinRFP AI does not currently hold SOC 2, FedRAMP, or CMMC authorization, and is not authorized to process CUI or classified material. We will only claim a certification once it is actually completed and documented. If a security or procurement review needs more detail, contact us at support@winrfpai.com.

8. Contact

Questions about how we handle your data or how our AI works? Email support@winrfpai.com. We'll answer like a real person, because one will.