Current sub-processors
| Sub-processor | Purpose | Processing location |
|---|---|---|
| Supabase (managed cloud infrastructure) | Application database, authentication, storage, server-side functions. | United Kingdom / European Union |
| Cloudflare | Edge network, DDoS protection, TLS termination, static asset delivery. | Global edge; primary logs in EU/UK |
| OpenAI (via vetted gateway) | Large language model inference for drafting, scoring, and question answering. Zero-retention configuration for API traffic. | United States / European Union |
| Anthropic (via vetted gateway) | Large language model inference for long-context reasoning tasks. Zero-retention configuration for API traffic. | United States / European Union |
| Google Cloud (Gemini via vetted gateway) | Large language model inference for multimodal and OCR tasks. Enterprise no-training terms. | European Union |
| Firecrawl | Structured extraction of public procurement web pages listed by the customer or in the platform catalogue. | United States |
| Resend | Transactional and notification email delivery. | European Union |
| Stripe | Payment processing for paid subscriptions. Card data is handled by Stripe and never stored by us. | United Kingdom / European Union |
| ElevenLabs | Optional text-to-speech for accessibility and audio summaries. Only used when a user triggers the feature. | United States / European Union |
Changes to this list
We review our sub-processors regularly and update this page when we add or replace one. Customers on paid subscriptions may subscribe to change notifications by writing to laura@contracttenders.com. Where our DPA provides an objection window, we honour it before onboarding a new sub-processor for Customer data.
Public data sources
The Service also ingests information from public procurement portals and open data sources (for example the World Bank Projects and Operations database, the UK's Contracts Finder and Find a Tender, the European Commission's TED, and various multilateral development bank portals). Those sources are not sub-processors, but their terms of use may apply to the content they publish.
Questions about this document? Please write to laura@contracttenders.com. Contract Tenders is a service of Rhics Ltd, 150 City Road, London EC1V 2NX, United Kingdom.