Help center

Data, privacy and security

Customer data is hosted in the EU/EEA and processed under GDPR, it is never used to train AI models, and you can export or delete it yourself.

Hosting and processing

Application and customer data is stored with EU-based providers. Every service we use to run Tenderen is listed on the subprocessors page.

Access

Only users you invite into your company can see your data. Tenderen staff do not access customer data without your consent for a support case, and such access is logged.

Export and deletion

You can download an export of your personal data and delete your account from Settings. When a company ends its customer relationship, its data is exported on request and deleted within 60 days.

Certifications

Tenderen follows GDPR and the Norwegian Personal Data Act. ISO 27001 certification is in progress — we are not certified yet.

Limits

  • A signed Data Processing Agreement is available on request from [email protected]; a public summary is on the DPA page.

Security →Subprocessors →Data processing agreement →Sign-in, roles, two-factor authentication and SSO →

More in the help center

Still stuck?

Email [email protected] and a person on the team will answer. Logged-in users can also send a request from the in-app help page.

Last reviewed 4 October 2026