How to Redact a Bid or RFP Proposal Before Release

By the SladdPDF team · Published September 13, 2026 · Updated September 13, 2026

A losing bidder can request the winning proposal under the Freedom of Information Act once a government contract is awarded — and agencies generally have to release it, minus whatever is genuinely exempt. Since 2019, the test for what counts as exempt "confidential" business information has been narrower and more literal than most contractors assume, and the law puts the burden of marking your own data on you, not on the agency.

Why does a losing bidder get to see my proposal?

Because federal procurement runs on the same default as the rest of government: records are public unless a specific FOIA exemption applies, and the agency — not the contractor — decides what to release. Once an award is made, the winning proposal is no longer just an internal evaluation document; it is a record the agency holds, and 5 U.S.C. § 552 lets anyone request it, including the competitors who lost.

Agencies cannot withhold a whole proposal just because parts of it are sensitive. The statute requires that any reasonably segregable, non-exempt portion still be released after the exempt parts are removed — the same segregability duty that applies to every other FOIA request. We cover that duty, and the rest of the exemption framework, in our FOIA redaction guide. What is different about a proposal is which exemption does most of the work: Exemption 4, for trade secrets and confidential commercial or financial information.

What does FOIA Exemption 4 actually protect?

Exemption 4 covers "trade secrets and commercial or financial information obtained from a person and privileged or confidential." For four decades, courts read "confidential" to require a showing that release would cause substantial competitive harm to the submitter — a standard from the 1974 D.C. Circuit case National Parks & Conservation Association v. Morton.

That changed on June 24, 2019. In Food Marketing Institute v. Argus Leader Media, the Supreme Court rejected the competitive-harm test entirely. Writing for a 6–3 majority, Justice Gorsuch held that commercial or financial information is "confidential" under Exemption 4 when it is both customarily and actually treated as private by its owner, and it was provided to the government under an assurance of privacy. The case arose from a FOIA request for retailer-level SNAP (food stamp) redemption data the USDA had always kept confidential; the Court sided with the retailers and the government against the requester.

The practical effect for contractors is double-edged. It is now easier to keep information confidential if you can show you have always treated it as private and the government gave some assurance of confidentiality — you no longer have to prove a competitor would exploit it. But the flip side cuts the other way: information you have shared broadly, published, or included in other unrestricted filings is not "customarily" private, however sensitive it looks, and Exemption 4 will not save it. The Justice Department's Office of Information Policy issued post-Argus Leader guidance confirming agencies must now apply this narrower, more literal reading.

How do you mark a proposal so it's protected?

By putting the exact restrictive legend the Federal Acquisition Regulation requires on the title page and on every sheet you want protected — an unmarked page gets no special treatment when a FOIA request or a protest comes in. FAR 52.215-1(e), "Restriction on Disclosure and Use of Data," is the clause most competitive solicitations incorporate, and it sets out two required legends.

The title page of the proposal must carry a legend stating that the proposal includes data that shall not be disclosed outside the government and shall not be duplicated, used, or disclosed — in whole or in part — for any purpose other than to evaluate the proposal (with an exception once a contract is awarded, to the extent the resulting contract allows). Each individual sheet containing the data you want restricted must separately state that use or disclosure of that sheet is subject to the restriction on the title page.

Marking is necessary but not sufficient — a legend does not automatically make something a trade secret, and the underlying content still has to meet the Exemption 4 standard above. Contractors typically restrict unit pricing and cost buildups, proprietary methodologies, staffing rate cards, and technical approaches that go beyond what the solicitation required. A proposal's bottom-line price is treated differently; see below.

What is predisclosure notification, and how do you use it?

It is your chance to object before an agency releases anything you marked. Executive Order 12600, issued in 1987, requires agencies to establish "reverse FOIA" procedures: before releasing records containing confidential commercial information, the agency has to make reasonable efforts to notify the submitter, describe the material, and give a deadline to object. If a requester sues to force disclosure, the agency's own procedures must require that you be promptly told about the lawsuit too.

In practice, predisclosure notice arrives as a letter identifying the FOIA request and the marked pages the agency is considering releasing, with a short window — often 10 business days — to respond in writing. A useful objection does more than say "this is proprietary": it should explain, page by page, why the marked information is customarily kept private, how it was provided under an assurance of confidentiality, and what harm release would cause. That is the record an agency (and, if it comes to that, a reviewing court) will actually weigh under the Argus Leader standard.

Miss the deadline, and the agency can proceed to release. Object promptly and specifically, and the agency has to consider your position — though the final call on what gets withheld is still the agency's, not yours.

What almost never stays confidential?

Total contract price is the clearest example. Agencies and courts consistently treat the bottom-line award amount as information the public needs in order to evaluate how government funds were spent, and it is released even when every other page of the proposal is withheld. Marking the total price with a restrictive legend does not change that outcome.

Information you have published elsewhere, disclosed to other customers without restriction, or that simply restates the solicitation's own requirements is not "customarily" private under Argus Leader, no matter how the page is marked. Overmarking a proposal top to bottom does not add protection — it just guarantees a bigger fight during predisclosure notification, for no better outcome.

What happens during a GAO bid protest?

A losing bidder can also see the winning proposal by protesting the award to the Government Accountability Office, but only through counsel admitted to a protective order — not directly. GAO's protective order lets outside attorneys who are not engaged in their client's competitive decision-making review the unredacted record, including the awardee's proposal and the agency's evaluation documents, while barring them from sharing the underlying material with their own client.

That arrangement is deliberate: it lets a protester's lawyer test the agency's evaluation on the merits without handing a competitor's pricing and technical approach to the competitor itself. If you are an awardee whose proposal is now part of a protest record, your FAR 52.215-1 markings and any predisclosure objections carry over into how the agency and GAO handle the protective-order material.

How to redact and submit a proposal: step by step

1. Mark as you write, not after submission. Add the FAR 52.215-1 title-page and per-sheet legends while assembling the proposal, so nothing gets missed under deadline pressure.
2. Separate the two categories in your own head first. List what you believe is customarily private (rate cards, cost models, proprietary methods) versus what you know will be released regardless (total price, boilerplate, solicitation language).
3. Prepare a redacted copy alongside the original if the solicitation requires one, or as soon as you anticipate a FOIA request or protest after award.
4. Redact with a tool that actually removes the text, not one that draws a box over it. A shape placed on top of a PDF page leaves the underlying text selectable and searchable — recoverable with a simple copy-paste. You can redact a proposal PDF for free in your browser with SladdPDF: the file never leaves your machine, and Secure mode rasterizes each page after redaction so there is no text layer left to recover. The free tier has no page limit; only 300 DPI export requires a Pro key.
5. Strip metadata. Author names, company identifiers, and revision history in document properties can undercut a confidentiality claim or simply reveal more than intended. Clear it on export.
6. Verify before you send. Open the finished file, select all, copy, and paste into a plain text editor. If a redacted number or clause appears, the redaction did not work — start again.
7. Respond to predisclosure notices on time. If an agency later notifies you under Executive Order 12600 that a FOIA requester wants your marked pages, argue specifically why each one is customarily and actually kept private — not just that you marked it.

For the general mechanics of redacting a PDF properly — the difference between drawing a black box and actually destroying the underlying text — see our step-by-step guide to how to redact a PDF.

Common mistakes contractors make

• Assuming "confidential" in your cover letter is enough. Only the specific FAR 52.215-1 legends, on the title page and each restricted sheet, put the agency on notice.
• Marking the total price. It gets released anyway, and overbroad marking makes the agency (and a reviewing court) trust your other markings less.
• Drawing a black box in a PDF viewer. The text underneath usually survives and can be copied out — see our roundup of famous redaction failures for how often this exact mistake has backfired publicly.
• Missing the predisclosure notice deadline. Silence is treated as no objection, and the agency proceeds to release.
• Marking language you copied from the solicitation. It originated with the government; you cannot make it yours by adding a legend.
• Forgetting metadata. A document's properties can carry the same names and figures you just redacted from the visible page.

This article is general guidance, not legal advice. Talk to counsel experienced in government contracts before relying on any specific confidentiality determination.