Security and privacy

Handle sensitive business information deliberately.

Government contracting support can involve entity documents, ownership details, tax records, proposal materials, and account information.

Security expectations

Check: Use approved channels for sensitive document exchange.
Check: Keep official account credentials owned by the client.
Check: Avoid placing passwords, bank details, or secrets in public contact forms.
Check: Limit access to client documents by role and business need.
Check: Define retention and deletion expectations for sensitive materials.

Check: Website and lead forms may collect contact details, company information, readiness answers, service interests, deadlines, registration status, certification goals, proposal context, and related intake details.
Check: Service work may involve entity documents, ownership details, tax records, profile information, capability statements, proposal materials, pricing assumptions, and official-system status information.
Check: Public forms do not accept file uploads; an advisor should provide the approved document-exchange path after intake when documents are needed.
Check: Gov Register and Gov Contract Finder are operated by the same company, so shared CRM, scheduling, email, billing, support, and software systems may be used for service delivery.

Check: Passwords, one-time codes, official account credentials, banking credentials, or login recovery information.
Check: Classified information, export-controlled information, protected health information, or unnecessary sensitive personal identifiers.
Check: Solicitation packages, proposal files, tax documents, ownership documents, or other sensitive service files before an approved document-exchange path is provided.
Check: Anything you are not authorized to disclose to Gov Register, Gov Contract Finder, or their service providers.

Check: Personal data may be used to provide and maintain the website and services, respond to inquiries, route requests, prepare consultations, deliver client work, improve forms and analytics, enforce terms, and comply with legal obligations.
Check: Third-party providers may support hosting, analytics, CRM, scheduling, email, billing, support, secure document exchange, and software infrastructure.
Check: Providers with access to personal data are expected to use it only for tasks performed on behalf of Gov Register or Gov Contract Finder.
Check: Privacy questions, data requests, and suspected security issues should be sent to team@govcontractfinder.com.

Check: Keep official government account credentials and recovery methods under your control.
Check: Provide truthful, accurate, complete, and authorized information.
Check: Review documents before submission to Gov Register, Gov Contract Finder, or official systems.
Check: Tell Gov Register promptly if submitted information should be corrected, restricted, deleted, or handled through a different approved channel.