Private sourcing

Security & confidentiality.

See what has been demonstrated and what remains gated. Synthetic staging tests do not certify production readiness or authorise confidential technical disclosure.

Bounded staging evidence

Demonstrated with synthetic staging records

  • Private RFQ records and deliberate Admin review of non-confidential summaries
  • Opportunity-specific Supplier interest and Buyer-authorised anonymous conversations
  • Synthetic attachment upload, malware scanning, authorised download and revocation
  • Selected authenticated role restrictions and saved audit records
  • These observations are not acceptance of the complete security boundary
Staging only

Pending confidential-workflow safeguards

  • Technical drawing release to Suppliers and integrated NDA gates are not released
  • An anonymous conversation or Direct Connection is not an NDA or document release
  • Final cross-company, session-revocation and concurrent-file verification remains open
  • Exact-recipient and document-version disclosure must pass its release checks
  • Factory operational controls remain subject to separate security and approval gates
Release gates remain

Not claimed or released

  • Independent penetration-test evidence remains a release gate
  • Internal AI reviews and automated tests are not independent certification
  • No classified-data, MOD approval or defence certification claim
  • No end-to-end-encryption claim
  • No guarantee that downloaded copies can be recalled or screenshots prevented

Before confidential technical disclosure

These are required release conditions, not a claim that confidential technical-package sharing is currently available.

  1. The Buyer owns or is authorised to disclose the information and approves the exact recipient and scope.
  2. Where an NDA is required, the correct parties, agreement version and acceptance must be verified before access.
  3. Each released file version needs a clean scan and a separate permission decision. A clean scan alone grants no access.
  4. Access, expiry and revocation must be enforced server-side and recorded. Revocation cannot recall copies already downloaded.
Keep this enquiry non-confidential

Do not submit classified, export-controlled, NDA-restricted or unauthorised personal information. Agree the right NDA and secure disclosure process before sharing protected technical data. Do not use conversation attachments as a substitute for an approved confidential technical-package release.

Legal information