Security

Last updated: 12 July 2026

Keeping your tender documents safe is central to TenderDocs. This page describes, in plain terms, the measures we take to protect your account and your files.

Your documents stay on our server

Every operation — merging, splitting, compressing, extracting pages and OCR — runs on our own server. Your files are not uploaded to any outside company or online API to be processed. This keeps sensitive tender material inside our environment.

How we protect passwords

Passwords are never stored in readable form. Each one is protected with a strong, one-way hash (Argon2id) with a unique salt, so the original password cannot be recovered from our database — not even by us.

Encryption in transit

The application is served over an encrypted (HTTPS/TLS) connection, so information travelling between your browser and the server — including your password when you sign in and the files you upload — is protected from eavesdropping.

Access control

• All pages except the sign-in and legal pages require you to be authenticated.
• Administrative functions, such as managing user accounts, are restricted to admin users.
• Sessions are carried by a secure sign-in cookie that expires after a period of inactivity.

How files are stored

Uploaded files are saved outside the public web folder under randomly generated names, so they cannot be reached or guessed through a public link. Temporary files created by the PDF tools are deleted as soon as the operation completes.

Your part in staying secure

• Choose a strong, unique password and keep it private.
• Sign out when using a shared computer.
• Only upload documents you are authorised to handle.

Reporting a vulnerability

We welcome responsible disclosure. If you believe you have found a security weakness in TenderDocs, please email info@sanjivanimt.com with the details and steps to reproduce it, and give us a reasonable opportunity to fix it before sharing it publicly. Please do not attempt to access or alter data that is not yours while testing.

A note on limits

No online service can promise perfect security. We work to protect your data with sensible, current safeguards and to correct issues promptly, but we cannot guarantee that a breach will never occur. This page describes our practices and is not a warranty. For related terms, see our Terms & conditions and Privacy policy.

TenderDocs is operated by Sanjivani.