Our principles: what we will and won't do

Cornerstone Contracts is built and run in Alberta, for Canadian contractors. A bid pipeline only works if you can trust what it tells you — which tenders fit, what a draft says, what happens to your data. So rather than ask you to take that on faith, here's what we hold to, and the lines we won't cross to win a sale.

We publish what's true today, not what we hope to ship

Our trust and security page deliberately separates what is true now from what is on the roadmap. When something is in progress, we say so — including that we don't yet hold our own SOC 2 attestation. When a capability has limits, we name them. The fastest way to lose a contractor's trust is to oversell coverage you don't have, so we don't.

The right tool for each job

We use AI where it genuinely helps and an algorithm where it genuinely helps — and we don't blur the two. The match score that ranks your feed is computed deterministically, so it's reproducible and you can see why each tender surfaced. AI is reserved for drafting proposals, where tailored language is the point. We explain that split in full in why we don't use AI to match bids.

We don't fabricate — in your proposals or our writing

A drafted proposal runs through a validator that checks for fabricated facts — invented contract clauses, hallucinated dates — before it reaches you, because a confident-sounding error in a public bid is worse than no draft at all. We hold our own content to the same bar: the guides on this blog are researched against primary sources and reviewed before they're published.

Your data is yours

We handle data under Canada's privacy law (PIPEDA) and applicable provincial legislation. Concretely:

• You can take it with you. Export your complete account data anytime from your settings.
• You can erase it. Deleting your account permanently purges your profile, bid history, and proposal drafts within 30 days.
• We name who touches it. Every third-party processor is listed on our trust page, and the AI provider that drafts proposals operates under zero-retention enterprise terms.
• We keep it close to home. Primary data is stored in a Canadian region where available; where AI inference routes elsewhere, we document it in the privacy policy.

We keep our promises honest, including in our marketing

Where our coverage of a market is still being proven, we say so rather than push you to sign up for something we can't yet deliver well. No dark patterns, no buried cancellation, no "AI-powered" claims papering over how the product actually works. If we get something wrong, we'd rather you catch us in plain language than in fine print.

We're accountable

Security issues can be reported to us directly, and we commit to acknowledging them and responding on a published timeline — and to notifying affected customers within 72 hours of confirming a material data incident. The details, including how to reach us, are on the trust and security page.

---

That's the standard we're building to. If you hold us to it and we fall short, tell us — that's the point of writing it down. When you're ready, start free and see whether the product earns the trust this page is asking for.