Security overview
Control starts with clear boundaries.
PullWorx is an invitation-only product under active development. This overview describes the safeguards present in the current preview and the responsibilities that remain with every customer and reviewer.
Identity and access
Access to the hosted application uses authenticated accounts. Organization membership and role-aware application controls restrict access to contractor workspaces. Access should be provisioned only to people who need it and removed when responsibilities change.
Tenant and workspace separation
Cloud workspaces are organization-scoped. PullWorx’s application and database controls are designed to prevent one contractor organization from reading or changing another organization’s project data. These controls are tested as part of the release process.
Document handling
Uploaded project documents follow a controlled intake workflow. Supported documents can be scanned, classified, parsed, and presented for human review. Extracted values are proposals until an authorized user accepts them; PullWorx does not silently rewrite project scope from a document.
Decision controls
Procurement packages, RFQs, commercial evaluations, awards, and purchase orders use revisioned records and readiness checks. PullWorx is designed to preserve the basis of a decision and surface missing confirmations before release.
Current limitations
The preview is not a substitute for a customer’s security program, contract review, engineering judgment, or approval authority. Security capabilities and operating procedures continue to evolve during the private-preview period. Report suspected security issues to the PullWorx team directly.