Procurement Policies & Terms

Security & Data Protection

• All connections secured via HTTPS encryption
• Passwords hashed using industry-standard algorithms (bcrypt/argon2)
• Role-Based Access Control (RBAC) with least-privilege principle
• File scanning hooks for uploaded documents
• Bank details encrypted at rest
• Rate limiting and bot protection on signup/login

Vendor Participation Rules

• Only vendors with Approved status may submit bids
• Category match may be required for specific tenders
• A minimum compliance score may apply (configurable per tender)
• Bid withdrawal is allowed before the submission deadline (configurable)
• Addendums must be acknowledged before final bid submission
• Submission deadlines are strictly enforced (timezone: Asia/Dhaka)

Anti-Bribery & Ethics

By registering on this platform vendors agree to:

• Not engage in bribery, corruption, or collusion of any kind
• Provide truthful, verifiable information in all documents
• Report any irregular activity or solicitation to the procurement team
• Accept that violation of these terms may result in suspension or blacklisting

Audit & Compliance

• Every important action is logged with actor, timestamp, and before/after values
• Audit logs are immutable (append-only) and retained per regulatory requirements
• Vendors can view their own action logs; internal staff have broader access
• ISO-aligned procurement workflow ensures full traceability

Billing & Payment Terms

• Bills linked to Purchase Orders or awarded tenders
• Bill status flow: Draft → Submitted → Under Review → Returned → Approved → Paid → Cancelled
• Vendors can track payment progress and finance remarks
• Challan/delivery notes must accompany bill submissions