Your Nation's data staysyour Nation's data.
What your team puts into NOFO belongs to your Nation. Here is who can see it, how access works, and how it's protected.
Our commitments
The principles every part of the product is built around.
Private by default
Access follows your boundaries
Never someone else's asset
How it works in practice
Principles only matter if the product enforces them. These are enforced in the product, not just in policy.
Every table is locked to its team
NOFO's database enforces row-level security on every table, so a team's records can only be read by members of that team. It's checked by the database itself on every request, not just by the app.
Verified sign-in
Staff sign in with their Microsoft or Google account, including their own government's Microsoft tenant, or with an email address that must be confirmed before the account works.
Password resets end other sessions
When a password is reset, every other session on that account is signed out, so anyone who had access before the reset loses it.
Partners join by invitation
Consultants and partners see a Nation's workspace only when invited onto its team, and only while they remain on it.
Questions Nations ask us
Straight answers about who can see your information, how it is protected, and who controls it.
Only the people your Nation puts on its team. Goals, matches, documents, and activity are visible to your team and no one else: not other Nations, not the public, not other organizations on NOFO.
No. What your team writes into NOFO belongs to your Nation. We don't sell it, and we don't turn your Nation's information into somebody else's product.
Your Nation invites each person onto its team, including outside partners like grant consultants. They see your workspace only while they are on the team, and removing them ends that access.
Yes, both ways. Traffic between your browser, NOFO, and its database runs over HTTPS (TLS), and the database itself (managed Postgres on Supabase) encrypts stored data at rest with AES-256, including backups.
The database enforces it, not just the app. Row-level security is on for every table, so each request is checked against the team it came from. A request for another team's records returns nothing.
Staff sign in with Microsoft (including your own government's tenant) or Google, so NOFO never sees those passwords, or with an email address confirmed before the account works. Sessions are signed with ES256 keys, and resetting a password signs out every other session.
NOFO reads open funding programs against the goals your team writes, and explains why each match fits. Your goals are used to find and explain your matches, and every match shows its reasoning so your team can judge it.
No. NOFO is an independent product, not a government system. Which programs you watch, pursue, or pass on stays inside your team's workspace.
How we use AI
NOFO uses AI to read open funding programs against the goals your team writes, and to explain why each match fits. Your goals are used to find and explain your matches.
Every match comes with its reasoning, so your team can see exactly why a program was suggested and decide for itself.
Start with one goal. See what funds it today.
Create an account, write your first goal, and have matches in front of you before the end of the session.
