Compliance

Contractors trust TM Takeoff to catch compliance requirements buried in specs. We apply the same discipline to how we run our own platform. This page summarizes the standards and laws we align with and where to find the details.

Data protection and privacy

• Privacy Policy: what we collect and how we use it. Read the Privacy Policy.
• GDPR (EU, UK, Switzerland): our roles, lawful bases, your rights and transfer safeguards. Read about GDPR.
• Data Processing Agreement: our commitments as a processor of your data, including Standard Contractual Clauses for international transfers. Read the DPA.
• U.S. state privacy laws: we honor access, correction and deletion requests, and we do not sell personal information or share it for targeted advertising.
• Cookies: optional cookies are used only with consent, and you can change your choice at any time. Read the Cookie Policy.

Security standards

• Hosting on SOC 2 compliant infrastructure in the United States.
• Encryption in transit (TLS 1.3) and at rest (AES-256).
• Separate, isolated storage for each customer.
• Full security audit of the application codebase.

Details are on our Security page.

Government and institutional projects

TM Takeoff is used on school, institutional and government bids, where spec compliance is critical. For these customers:

• Data is stored and processed in the United States.
• We can complete vendor security questionnaires and provide the documentation your procurement team needs.
• The compliance checklist flags requirements such as submittals, UL listings, NFPA standards, testing, warranties and hardware restrictions found in your specifications.

Responsible AI

• Transparency: the Quality Report shows every page that was uploaded, read, classified, extracted or skipped, with no black box.
• Human review: outputs are designed to be reviewed and verified by your estimators before you bid. See the AI outputs section of our Terms.
• No training on your data: your documents are not used to train AI models.

Accessibility

We work to make our website usable for everyone and design toward WCAG 2.1 Level AA. If you run into an accessibility barrier, please tell us at support@tmtakeoff.com.

Veteran-owned business

TM Takeoff is a veteran-owned business. Contact us if your organization needs documentation for supplier diversity programs.

Compliance requests

For security questionnaires, a countersigned DPA, our subprocessor list or other compliance documentation, email support@tmtakeoff.com.