Data Processing Agreement
DPAGDPR Article 28 processor terms covering sub-processors, international transfers, breach notification, and deletion.
- Version
- v1.2
- Effective
- 17 July 2026
- File
- PDF · 4 KB
Bespoke pricing for bid teams, consortia and framework leads running 15+ tenders a month. Everything in Scale, plus the controls larger organisations need.
Separate workspaces per business unit or framework, with cross-workspace answer library sharing.
Okta, Azure AD, Google Workspace. SCIM provisioning available.
DPA, SOC 2 report, penetration test summary, and named data-processing contacts.
Direct ingest from SharePoint, OneDrive or your internal DMS as the answer library source of truth.
Send these straight to your procurement, legal, and infosec teams. For SOC 2 reports and penetration-test summaries under NDA, request them in the form above.
GDPR Article 28 processor terms covering sub-processors, international transfers, breach notification, and deletion.
Technical and organisational controls: hosting, encryption, access control, logging, backups, and incident response.
Documents are provided for review purposes. The DPA becomes binding on countersignature as part of the Enterprise order form.
Let your bid team sign in with the same account they use for everything else. BidComplete supports SAML 2.0 and OpenID Connect, with just-in-time provisioning so new team members get access the moment IT adds them to the right group.
Any SAML-compliant IdP. Signed assertions, encrypted attributes, IdP-initiated or SP-initiated flows.
OpenID Connect authorization code flow with PKCE for modern identity platforms.
Users at your verified email domain(s) are automatically routed to your IdP — no separate login URL.
Optional. Push user create, update and deprovision events directly from your IdP.
Tell us in the enquiry form above (or email hello@bidcomplete.co.uk) that you want SSO, and which IdP you use.
You receive our ACS (assertion consumer) URL, Entity ID, and required attribute mappings for your IdP admin.
Reply with your IdP metadata URL (or XML) and the email domain(s) that should route through SSO.
SSO goes live in your workspace, usually within one business day. Users at your domain sign in through your IdP from then on.
email, given_name, family_nameSingle Sign-On (SAML 2.0 / OIDC via Entra ID, Okta, Google Workspace), SharePoint document sync, a signed Data Processing Agreement, dedicated Customer Success support with a named contact, custom onboarding and training for your bid team, and volume pricing for consortia handling 15+ tenders per month.
Any SAML 2.0 or OIDC provider — including Microsoft Entra ID (Azure AD), Okta, Google Workspace, OneLogin, JumpCloud and Ping Identity. We supply Service Provider metadata (ACS URL, Entity ID and required attribute mappings) and can complete activation in one business day once your IdP admin shares the metadata back.
We connect via Microsoft Graph using OAuth so BidComplete can index your policies, case studies, certifications and past bid responses in your existing SharePoint libraries. Updates flow through automatically, permissions inherit from SharePoint, and no documents are duplicated outside your Microsoft tenant.
Yes. Infrastructure is UK/EU hosted, all customer data is encrypted in transit and at rest, and every Enterprise contract includes a GDPR Article 28 Data Processing Agreement covering sub-processors, international transfers, breach notification and deletion. Your bid content is never used to train shared AI models.
Enterprise pricing is bespoke and scales on the number of active bid workspace seats and monthly tender volume, not per-document. Framework consortia and shared-service groups can pool seats across member organisations. Send an enquiry using the form above and we'll return an indicative quote within one business day.
Most Enterprise workspaces are live within five business days: workspace provisioning and SSO activation in one to two days, SharePoint sync in one day, and a facilitated onboarding session covering your Knowledge Store taxonomy, evaluation templates and export branding in the remainder of the first week.