Confidentiality
Confidentiality and your specification
What happens to a specification sent to Wetware World: who reads it, what suppliers are told about you, how long it is kept.
By default your specification goes to suppliers with your identity removed. Your name, your institution and your contact details stay with us unless you tick the box that says otherwise, or unless the material itself requires the end user to be named.
The checkbox on the quote form reads: You may share my specification with candidate suppliers under their standard confidentiality terms. If unchecked, we will circulate an anonymised version. The default state is unticked.
1Handling of a specification
The same path applies whether you upload a file through the quote form or email a protocol to us directly.
| # | Step | Process and access |
|---|---|---|
| 01 | Arrival | The submission is written to a record on our host, together with any attached files. It is not posted anywhere, indexed, or made public. |
| 02 | Reading | A person at Wetware World reads it in full, including identity, in order to understand and scope the requirement. This is the only stage at which the complete submission is read as a whole. |
| 03 | Normalisation | We rewrite the requirement into a supplier-facing enquiry: technical parameters, quantities, quality documentation, format, timeline. Identity is stripped at this step unless you opted in. |
| 04 | Circulation | The enquiry goes to a shortlist of laboratories we judge capable. Each receives only the enquiry, not the original submission, and not the other suppliers' names. |
| 05 | Quotation | Responses come back to us, are normalised onto a comparable basis, and are returned to you. Suppliers do not receive each other's pricing. |
| 06 | Order or close | If you order, identity is disclosed to the winning supplier only to the extent needed to ship and to satisfy any end-use requirement. If you do not order, the record moves to the retention clock in clause 6. |
Attachments are circulated only where the technical content cannot be conveyed without them: a CAD file for a device, a dimensioned drawing, a differentiation protocol. Where a file is circulated, we state which file went to how many suppliers.
2Internal access
Access is limited to the people working on your enquiry. Wetware World is a small early-stage company; every person with access to a submission is directly involved in sourcing it.
We do not operate a role-based access control matrix. Submissions live with the request record rather than being forwarded, and access to the correspondence mailbox is limited to the people who need it.
The technical infrastructure that holds the record is disclosed in the privacy policy, clause 4.
3Identity disclosure to suppliers
Three states. The first two are buyer-controlled.
| State | What the supplier is told |
|---|---|
| Default, anonymised Checkbox unticked | The technical requirement, the quantity, the timeline, the quality documentation needed, and a general descriptor of the buyer type and region, for example "an academic laboratory in western Europe". No name, no institution, no contact details, no project title. |
| Opted in, identified Checkbox ticked | The same requirement, plus your identity, shared under the supplier's standard confidentiality terms. Applicable where your institution's name gives access to academic pricing, an existing account, or a licence you hold. |
| Required by the material Not optional | Some material cannot be supplied to an unnamed end user: controlled cell lines, anything under a material transfer agreement, licensed lines, and shipments requiring an end-use statement or export screening. The supplier must know your identity. This is stated before circulation, and you may withdraw. |
The quote form also asks whether you want the supplier named. We name the supplier on the quotation where they have consented to being named. Where they have not, we describe capability, geography and accreditation, and name them under NDA on request.
On order placement, the winning supplier receives your delivery address. Shipment to an intermediary address can be arranged at quotation stage. It is workable for ambient goods. For cold chain it adds a handling step and increases the risk of a temperature excursion.
4Contents of the anonymised package
Removed:
- your name, role, email address and telephone number;
- your institution, department, laboratory name and principal investigator;
- your delivery address;
- project titles, grant numbers and internal codenames;
- identifying metadata in files where we can strip it, including document authorship and organisational headers.
Retained, as required for a supplier to quote:
- the technical specification itself;
- quantities, recurrence, and the timeline;
- quality documentation and acceptance criteria required;
- delivery format and cold-chain requirement;
- a region, which determines freight, permits and courier windows;
- a buyer-type descriptor, which determines academic or commercial pricing.
A specification can itself be identifying. Where a requirement is unusual, header anonymisation does not conceal the buyer from a supplier working in that field. We state when we assess this to be the case. The available measure is an NDA before circulation.
5Non-disclosure agreements
The quote form has a box for requesting an NDA before we discuss your requirement with anyone. Ticking it means we come back to you to put one in place before circulation, rather than circulating first.
- We will sign yours. Send your institution's template.
- Or we will send ours. A short mutual NDA, no exclusivity, no non-compete, no obligation to buy.
- Supplier NDAs. Where a specification goes out under an NDA, we put one in place with each supplier before circulating. This adds days to the timeline; we state how many.
Without an NDA, your specification is treated as confidential under this policy. An NDA is a negotiated instrument with defined remedies and binds the suppliers as well as us.
6Retention and deletion
| Item | Kept for |
|---|---|
| Specification text, where no order followed | 24 months from last contact |
| Attached files, where no order followed | 12 months from last contact |
| Specification attached to a completed order | 7 years, as part of the order record |
| Supplier-facing enquiry we generated | Same clock as the specification it came from |
Deletion on request. Email [email protected] and we will delete the specification and its attachments, and confirm on completion. The exceptions are material we must keep as part of an order record for tax or trade purposes, and export or end-use screening records where a control regime sets the retention period.
Deletion applies to our records. An enquiry already received by a supplier cannot be recalled. On request we will ask each supplier to delete it. We can compel deletion only where an NDA in place gives us that right.
7Prohibited uses of a specification
Wetware World does not:
- Sell specifications. Not to suppliers, data brokers or market research firms, not as a lead list, and not in aggregate.
- Publish them. No case study, blog post, conference talk or investor deck uses your requirement without your explicit written consent for that specific use.
- Share them with competitors as competitive intelligence. Where two customers request similar items, each is quoted separately and neither is told the other exists.
- Use them to compete with the buyer. Where a category we broker becomes a category we manufacture, the change is announced on the listing with the Made by Wetware World label before any customer is affected.
- Train models on them. Submitted specifications and attachments are not sent to third-party machine learning services.
- Add you to a marketing list on the basis of a quote request. Marketing consent is a separate, unticked box.
8Aggregate, non-identifying data
Derived statistics:
- counts by component category: cells, tissue, devices, services;
- how often a requirement turns out to be unsourceable, and in which categories;
- observed price and lead-time ranges by category, used to build the published pricing and lead-time reference;
- which specification fields are routinely left blank, used to revise the form and the WWD standard;
- which quality documents are most often required, to shape supplier requirements.
Rules applied:
- aggregates are published only where no single request can be inferred. No figure derived from fewer than five independent requests is published;
- no customer, institution, project or unique requirement is identifiable in anything published;
- a specification identifying by its content alone is excluded from published aggregates;
- publication of a specific case, such as a sourcing walk-through or a quote request used as a methodology example, requires written consent, and the draft is shown to you first.
The output of this work is a published pricing and lead-time reference.
9Ownership and unsolicited ideas
You own what you send. Your specification, protocol, drawings, sequences and data remain yours. Sending them to us grants a limited licence to source and quote against them, including circulating the technical content to candidate suppliers as described in clause 1, and no other licence.
We claim no rights in your requirement, in derivatives of it, or in a design arising from a conversation about it. Where a project involves joint design work, ownership is agreed in writing before the work starts.
Unsolicited ideas. Please do not send us business proposals, product ideas, or inventions unconnected to a quote request. We have no route to review them and cannot treat them as confidential. An unsolicited idea sent outside a request for supply may be used by us without obligation to you. This clause does not apply to specifications sent for sourcing, which are covered above.
10Limits
Four limits apply to the commitments above.
- Suppliers are separate companies. Once an enquiry reaches a supplier, their handling of it is governed by their terms or by an NDA we put in place, not by this page. The terms a given supplier operates under are available on request.
- Anonymisation does not defeat a knowledgeable reader. See clause 4.
- We may be legally compelled to disclose. A valid court order, a regulatory demand, or an export control obligation can require disclosure. Where we are permitted to tell you, we will.
- Our security posture is early-stage. We hold no ISO 27001 certification and no SOC 2 report. Measures in place are listed in the privacy policy, clause 10.
Where these limits are a blocker for your institution, raise it before sending anything. An NDA first, a redacted first pass, or a conversation before any document changes hands are all available.
Enquiries: [email protected].
doc WW-CONF-1.0 · effective 2026-09-01 · research use only · questions to [email protected]