Privacy
Last updated 15 October 2026.
Clean Vendor Check is run by ProcurementExpress. This page explains what we collect when you use it, why, and who we share it with. To ask a question or make a request about your data, contact us at procurementexpress.com.
What we collect
Your account. Your work email address, and the name, organization name and organization type you give us. Whether you asked for marketing emails. Your settings, such as the alert email and webhook address.
What you check. The vendor details you enter or upload: names, UEIs, CAGE codes, city, state, ZIP, and any reference or amount you add. Each check is saved as an evidence record with its result and the SAM.gov data it was checked against.
Vendor lists. When you upload a list, we read it to find the vendor details. Tax ID columns are dropped and anything shaped like an SSN, EIN or TIN is removed before anything is stored. The raw rows are deleted when you confirm the upload, or after 7 days if you don't. If you ask us to request a UEI from a vendor, we store the contact email you give us and what the vendor sends back.
Checks without an account. A check from the home page without signing in isn't saved as evidence. We use your IP address briefly, in memory, to limit how many free checks can be run. Our hosting provider also keeps standard request logs.
Usage. We record a small set of events, such as a page view, a check being run, a sign-up or a PDF download, with the type of result but never the vendor's name, UEI or other details you entered. We also record the campaign tags (such as utm_source) and the website that sent you here, so we know which channels bring people to us.
Payments. Card payments are handled by Stripe. We never see or store your card number. We keep the Stripe customer and subscription IDs and your billing status.
Cookies and local storage
cvc_sid: keeps you signed in, for up to 30 days.cvc_vid: a random ID that links usage events from the same browser, for up to a year.cvc_attr: the campaign tags and referring site from your first visit, for up to 90 days.- Your light or dark theme choice is kept in your browser's local storage.
The explainer video plays from Google Drive, which may set its own cookies, but only after you press play.
How we use it
- To run checks, keep your evidence records, monitor your vendors and send you alerts.
- To send sign-in codes, alerts and, if you ask us to, UEI requests to your vendors.
- To understand which parts of the service and which channels work, using the usage events above.
- To follow up about Clean Vendor Check and ProcurementExpress. Our team may contact you about your account. We only send marketing emails if you asked for them, and you can unsubscribe at any time.
We don't sell personal information.
Who we share it with
We use these providers to run the service. Each only gets what it needs for its part.
| Provider | What for |
|---|---|
| Vercel | Hosting (United States) |
| Neon | Database (United States) |
| Postmark | Sending email |
| Stripe | Payments |
| HubSpot | Our customer records: your email, name, organization and how you found us |
| Google Drive | Hosting the explainer video |
Verification pages. Each evidence record has a public verification page so your auditor can confirm it without an account. By default it shows the vendor searched, the result, the time and your organization's name. On the paid plan you can turn the details off; the integrity result is still shown.
UEI requests. When you ask a vendor for its UEI, the email we send names your organization.
AI assistants. If you connect Clean Vendor Check to Claude or another assistant, what you ask it to check, and the results, pass through that assistant under its own terms.
How long we keep it
Evidence records exist to be shown to auditors years later, so we keep them for as long as your account is open, and for at least seven years on the paid plan. Records are chained together so they can't be edited, and are only removed when your account is closed. Sign-in codes expire after 15 minutes. Usage events are kept for up to two years.
Your choices
You can update your account details in Settings, unsubscribe from marketing emails, revoke API keys and disconnect AI assistants at any time. To get a copy of your data, correct it or close your account, contact us at procurementexpress.com.
Changes
If we change this page in a way that matters, we'll update the date above and, for significant changes, tell account holders by email.