Use case · Public sector · Procurement
Public procurement: transparency without exposing bidders' people or secrets
Anonimatum Team
In short
Procurement law demands transparency about tenders and awards, but bids contain CVs, signatures, ID numbers and trade secrets. UK and US rules let you withhold what is sensitive without hiding the whole bid.
A single tender produces a mountain of documents: specifications, bids from several suppliers, evaluation reports, moderation notes, clarification questions and the award decision. Some of it must be published, some will be requested under FOI, and some will end up in front of a court if an unsuccessful bidder challenges the award.
Bids were not written to be public. They carry the CVs of key personnel, signatures of company officers, references with client contact details and, often, genuinely commercially sensitive material. This page explains the UK and US rules and how to prepare documents for each audience.
United Kingdom: the Procurement Act 2023 and FOIA
The Procurement Act 2023 introduced a much broader set of transparency notices across the procurement lifecycle, from planning to contract award, contract details and performance. For higher-value contracts, a copy of the contract itself must be published.
Section 94 of the Act provides the general exemptions: a contracting authority may withhold information where that is necessary to protect national security, or where the information is commercially sensitive and the public interest in withholding it outweighs the public interest in publishing it. Commercially sensitive information includes trade secrets and information likely to prejudice someone's commercial interests. Where information is withheld, the notice should say so and give the ground, unless that itself would harm national security.
Requests for bid documents outside the notices are handled under the Freedom of Information Act 2000: section 43 covers trade secrets and commercial interests, and section 40 covers personal information such as the names and CVs of the supplier's staff. Personal data is also subject to the UK GDPR whenever you publish it.
United States: FAR 24.202 and FOIA exemption 4
In US federal procurement, FAR 24.202 states that a proposal in the government's possession, submitted in response to a competitive solicitation, shall not be made available to any person under FOIA, unless it is set forth or incorporated by reference in the resulting contract. Other procurement information is assessed under the FOIA exemptions: exemption 4 protects trade secrets and confidential commercial or financial information, and exemption 6 protects personal information such as the résumés of key personnel.
Agencies still have to release reasonably segregable, non-exempt parts. State and local procurement is governed by state law and state public records acts, which usually contain similar trade secret and privacy exemptions.
Where personal data hides in procurement files
| Document | Common personal data | Usual treatment |
|---|---|---|
| Specifications and tender notice | Name and role of the procurement lead | Published: official acting in a public role |
| Technical bids | CVs of key personnel, qualifications, experience | Names and contact details removed; evaluated experience kept where needed |
| Selection documents | Signatures, ID numbers, home addresses of directors | Not published; redacted if released |
| Evaluation and moderation reports | Evaluators, sometimes named bidder staff | Evaluators usually visible; bidder staff removed |
| Award decision and contract | Signatories of both parties | Published; checked so it does not carry data from the bids |
Also check scanned annexes: reference letters with a client's direct phone number, certificates showing dates of birth and photos with recognisable people. Our personal data glossary entry lists the less obvious categories.
A practical workflow for procurement teams
Before publishing or releasing procurement documents
- Ask bidders in the tender documents to identify, with reasons, what they consider commercially sensitive.
- Keep selection documents (IDs, signatures, company records) out of anything published.
- Remove names, ID numbers and contact details of bidder staff while keeping the evaluated content.
- Leave supplier names, evaluators and evaluation criteria visible.
- Apply irreversible redaction and strip metadata before uploading PDFs.
- Record what was withheld and on which ground, in case of challenge.
Releasing documents to an unsuccessful bidder in a challenge is a different exercise from publishing to the world: the court can see more under a confidentiality ring, while the public version must be minimal. Our page on FOI redaction covers the general disclosure rules.
Worked example (fictitious)
A public body runs a tender for building cleaning services. The winning bid from a fictitious supplier, “Brightway Facilities Ltd”, includes a method statement, CVs for the contract manager and two supervisors, a staffing model and three client references. When the contract details notice goes out, the public version keeps the supplier's name, the method statement and the qualifications that were scored, while the CVs lose names, home addresses and mobile numbers, the references lose the client contacts' direct lines and the staffing model is withheld as commercially sensitive under section 94, with the notice saying so. An unsuccessful bidder who later challenges the award may see more of the evaluation under a confidentiality ring ordered by the court, but never the redacted personal details it does not need.
How Anonimatum helps
Anonimatum uses its own AI, hosted on EU servers, to detect personal names, ID numbers, signatures and seals, QR codes, addresses, phone numbers and emails, and lets you review every proposed redaction before applying it. Supplier and evaluator names can stay visible with a whitelist (reverse anonymization), and internal reference codes can be caught with custom patterns.
Batch processing handles every bid in one go, and the built-in template for contracts with side seals applies the recommended options at once; see redacting contracts for details. Since version 1.9.0 you can group all the bids for a tender into one case file and publish the redacted result to your document management system or transparency portal.
Frequently asked questions
Can a supplier mark its whole bid as confidential?
It can try, but blanket claims rarely hold. Under the Procurement Act the authority still decides what is commercially sensitive and whether the public interest favours withholding; under FOIA each part must meet an exemption.
Should supplier company names be redacted?
No. Companies are not data subjects and award information is public. Sole traders are the exception, because their name identifies a person.
What about named key personnel in the bid?
Their names are rarely needed to understand the evaluation. The experience or qualifications that were scored can usually be shown without the person's name or contact details.
Do evaluators' names have to be published?
That depends on your policy and the document. Officials acting in a public role generally have lower privacy expectations, but junior staff may warrant more protection.
Get tender documents ready to publish
See the plans and start redacting bids and evaluation reports today, with review before every change and AI hosted in the EU.