Security
Published security practices and shared responsibilities.
Use it to review: Which practices are described, and what remains your responsibility?
Policy evidence and product boundaries
Make the trust review concrete—not ceremonial.
Use the published policy set, a controlled product evaluation, and your organization's own security, privacy, legal, and procurement review to decide whether Arc fits the material and workflow you intend to use.
This hub links to current public resources. It does not claim a certification, control, deployment model, or contractual term beyond what those resources and your agreement state.
Published policy set
Start with the document that answers your question.
Read the linked resource itself and confirm its effective date. A summary card is navigation, not a substitute for the governing text.
Privacy Policy
How personal information is described as collected, used, and handled.
Use it to review: Which data categories and processing purposes are relevant to your use?
Data Processing Agreement
Data-processing terms for eligible customer relationships.
Use it to review: Which roles, obligations, and transfer terms would apply?
GDPR
Public information about GDPR-related rights and practices.
Use it to review: How should your organization evaluate lawful use and data-subject requests?
Subprocessors
The published list of subprocessors involved in service delivery.
Use it to review: Which listed providers matter to your vendor review?
Acceptable Use
Rules governing prohibited or restricted use of the service.
Use it to review: Does the intended proposal workflow fit the permitted-use boundaries?
Terms of Service
The public terms governing use of the service.
Use it to review: Which service, account, liability, and usage terms need legal review?
Disclaimer
Limitations and cautions for information and generated material.
Use it to review: Which judgments and validations stay with your team?
Human accountability
Arc assists the draft; it does not own the submission.
Keep these responsibilities assigned to named reviewers, regardless of whether text was generated, imported, reused, or edited manually.
Source and claim verification
Confirm that cited material is current, authorized, relevant, and sufficient for each factual statement.
Requirements coverage
Map the actual buyer request to the response and resolve omissions, conflicts, and exceptions.
Commercial and legal approval
Approve scope, pricing, dates, service levels, warranties, security statements, and contractual language.
Access and delivery
Choose recipients, link controls, export handling, and the approved delivery channel for the opportunity.
Final release
Assign a person with authority to approve the complete proposal before it reaches the buyer.
Ongoing revalidation
Recheck reused material when the buyer, product, policy, evidence, or approval context changes.
Evaluation checklist
Validate the workflow with a low-risk sample first.
This sequence turns policy review into an observable adoption decision.
| Checkpoint | Evidence to collect | Owner |
|---|---|---|
| Read current policies | Relevant policy pages, effective dates, open questions, and applicable agreement | Security, privacy, legal, procurement |
| Confirm the live product | Plan controls, file types, sharing options, export paths, and workspace permissions actually available | Product owner and administrator |
| Run a non-sensitive pilot | Input handling, draft traceability, review steps, exports, and delivery events observed end to end | Proposal operations |
| Document approval ownership | Named reviewers for facts, requirements, commercials, legal terms, and release | Business owner |
| Record the decision | Accepted use cases, prohibited data, operating controls, and re-review trigger | Accountable approver |
Do not upload confidential buyer material until the appropriate people in your organization have reviewed the intended use, data classification, applicable policies, and contractual terms.
Analyzer boundary
A proposal score is a diagnostic signal, not a compliance certificate.
The public proposal analyzer uses deterministic checks to surface aspects of a submitted draft. It cannot verify every factual claim, buyer requirement, legal obligation, security representation, or organizational approval.
Your material, your review, your decision
Move from source files to a proposal draft your team can inspect.
Arc prepares a structured first draft from the material you provide. Your reviewers still own the facts, scope, pricing, commitments, and final approval.
Related Pages