# GovIQ

> Audit-grade procurement decision intelligence for Irish public capital delivery. GovIQ routes every Irish public-sector procurement to the right procedure, generates the documents, and signs a tamper-evident audit trail.

GovIQ is an Irish-incorporated, multi-tenant software platform for contracting authorities, OGP framework owners, and procurement consultants. It is built specifically for the Irish Capital Works Management Framework (CWMF), the Office of Government Procurement (OGP) frameworks, S.I. 284/2016, and Directive 2014/24/EU — it is not a generic e-procurement or e-tendering tool.

The product follows a single decision spine — Decide, Generate, Audit:

- **Decide** — a routing engine evaluates estimated value bands, subject matter (CPV), organisation policy, and framework eligibility against a versioned ruleset, returning procedure type, publication path, standstill, and a written justification. Every decision is hashed and pinned to the procurement.
- **Generate** — the signed decision pack drives document generation (RFT, ITT, schedules, award letters, standstill notices) from a single source of truth.
- **Audit** — every state change is recorded in a tenant-scoped, SHA-256 hash-chained, tamper-evident audit log, exportable for the Comptroller and Auditor General (C&AG), the Office of the Attorney General, or a Tribunal.

Modules: routing engine, tender packs, evaluation workflows, supplier portal, building passport, and OGP ledger — all sharing the same authentication, audit chain, and policy graph.

Contact: hello@goviq.ie (general), privacy@goviq.ie (GDPR), security@goviq.ie (vulnerability disclosure). Company: GovIQ Limited, registered in Ireland.

## Pages

- [GovIQ overview](https://www.goviq.ie/index.html.md): What GovIQ does — the Decide/Generate/Audit model, the six modules, compliance frameworks, and how to request a live walkthrough.
- [Trust, security and compliance](https://www.goviq.ie/trust.md): Certification roadmap (ISO/IEC 27001:2022 target 15 November 2026), security organisation, full sub-processor register, data protection posture, incident response, and responsible vulnerability disclosure.

## Optional

- [Privacy Policy](https://www.goviq.ie/privacy.md): GDPR Article 13/14 notice — what personal data GovIQ collects, lawful bases, retention periods, sub-processors, international transfers, and data-subject rights.
- [Cookie Policy](https://www.goviq.ie/cookies.md): Which cookies GovIQ uses at goviq.ie (strictly necessary and consent-based analytics only; no marketing cookies), and how to control them.