Legal & Policy Center

Procurement Data: We collect business information necessary for government contracting, including Agency Name, Point of Contact (POC), Solicitation Numbers (RFQ/RFP), and CAGE Codes.

Technical Data: We may collect engineering drawings, specifications, or Bills of Quantities (BOQ) uploaded via our secure portal for bid estimation purposes.

Usage Data: We collect minimal site telemetry to ensure the security and performance of our digital infrastructure in compliance with FAR 52.204-21 (Basic Safeguarding of Covered Contractor Information Systems).

Bid Execution: To prepare accurate quotes, proposals, and lead time estimates in response to formal government solicitations.

Contract Fulfillment: To process orders, coordinate logistics, and generate WAWF-compliant invoices.

Compliance: To screen parties against the Denied Persons List (DPL) and ensure adherence to EAR (Export Administration Regulations) and ITAR where applicable.

No Commercial Sale: P-22 Corp does not sell, rent, or trade client data to third-party advertisers.

Government Reporting: Data is shared only with federal agencies as required by law (e.g., eSRS reporting, SAM.gov data validation) or with authorized sub-contractors strictly for contract performance.

Business Data Access: As a B2G (Business-to-Government) entity, P-22 Corp processes data primarily related to commercial and federal entities. Authorized representatives may request corrections to their vendor profile data by contacting our Government Desk.

Privacy Compliance: While our primary focus is federal contracting, we respect state-level privacy mandates (CCPA/CPRA) where applicable to individual site visitors. We do not monetize personal data.

FOIA Inquiries: For data related to government contract awards, we direct inquiries to the respective agency's Freedom of Information Act (FOIA) officer.

Essential Security Only: We utilize "Strictly Necessary" cookies required for site security, load balancing, and the functionality of our secure document upload portal.

No Advertising Pixels: P-22 Corp does not employ third-party advertising tracking pixels or retargeting cookies.

Analytics: We use anonymized session data solely to monitor site performance and ensure uptime availability for government users.

Federal Security Standards: P-22 Corp implements security controls aligned with FAR 52.204-21 for the protection of Federal Contract Information (FCI). This includes encryption in transit (TLS 1.3) and encryption at rest.

Data Retention: Procurement data is retained for the duration of the contract lifecycle plus the statutory period required by the FAR (Federal Acquisition Regulation) for audit purposes (typically 3-7 years). Non-contractual inquiries are purged annually.

US-Based Processing: P-22 Corp operates exclusively within the United States. All data is processed and stored on US-based servers to ensure compliance with Export Administration Regulations (EAR).

No Offshore Transfers: We do not transfer sensitive technical data or solicitation details to foreign jurisdictions without explicit US Government authorization.

Regulatory Updates: This policy is reviewed annually or upon significant changes to federal cybersecurity mandates (e.g., CMMC updates).

Notification: Material changes affecting our data handling practices will be posted here with a revised "Effective Date." Continued use of our Government Desk constitutes acknowledgement of these protocols.