Legal
Subprocessors
These are the services we use to run Tenderen that process personal data on our behalf. For locations not stated here, see the provider's own documentation; transfers outside the EU/EEA rely on a valid transfer mechanism as described in the DPA.
Service delivery
| Provider | Purpose | Personal data | Location |
|---|---|---|---|
| Railway Corporation | Application hosting, database and cache. | All account and customer data stored in the service. | EU |
| Cloudflare, Inc. | DNS, network protection and storage of uploaded documents (R2). | Request metadata such as IP address; files you upload. | See provider |
| Stripe | Payments, subscriptions and invoices. | Billing contact, company details and payment details. | See provider |
| Getia AS (GetPlatform) | Our parent company's shared platform: central customer records, AI usage metering and the AI gateway that forwards AI requests to Anthropic. | User name, email, company and plan; content of AI requests in transit. | See provider |
| GetMailer (Getia AS) | Sending email: sign-in links, alerts, notifications and receipts (operated by Getia AS). | Name, email address and email content. | See provider |
| Functional Software, Inc. (Sentry) | Error and performance monitoring. | Technical error data, which can include user ID and IP address. Authorisation headers and cookies are removed before sending. | See provider |
| Apple Inc. | Push notifications to iOS devices (Apple Push Notification service). | Device push tokens and notification content. | See provider |
AI processing
| Provider | Purpose | Personal data | Location |
|---|---|---|---|
| Anthropic | AI models (Claude) for document analysis, chat and bid writing. | Tender documents, your documents and text you send to AI features. | See provider |
| OpenAI | AI models used by selected analysis features. | Tender documents and text you send to those features. | See provider |
| AI models (Gemini) used by selected analysis features; push notifications to Android devices (Firebase Cloud Messaging). | Text sent to those features; device push tokens and notification content. | See provider | |
| Mistral AI | Text recognition (OCR) of scanned documents. | Scanned documents you upload. | See provider |
| Perplexity AI, Inc. | AI models (Sonar) when a user selects a Perplexity model in the AI assistant. | Prompts and tender text you send to that model. | See provider |
Integrations you choose to enable
| Provider | Purpose | Personal data | Location |
|---|---|---|---|
| DocuSign, Inc. | Electronic signatures, when your company connects DocuSign. | Signer names, email addresses and the documents to be signed. | See provider |
| Slack Technologies | Delivering alerts to your Slack workspace, when connected. | Notification content sent to your workspace. | See provider |
| Microsoft (Teams) | Delivering alerts to a Microsoft Teams channel, when you add a webhook. | Notification content sent to your channel. | See provider |
| HubSpot, Inc. | Syncing your pipeline to HubSpot deals, when connected. | Tender and deal data you choose to sync. | See provider |
Questions
Email [email protected] for a signed DPA, questions about processing or to object to a subprocessor.
Last updated 4 October 2026