These providers help us run Tenderhooks. Processors act only on our instructions, under a data-processing agreement; independent controllers handle data under their own terms. We will update this page before adding a provider that handles personal data.
| Provider | What for | Where | Role | Transfers |
|---|---|---|---|---|
| Hetzner Online | Servers and database | Finland (EU) | Processor | Stored in the EU |
| Amazon Web Services (Amazon SES) | Sending account and alert emails; bounce and complaint reports (SNS, SQS) | Sweden (EU) | Processor | Stored in the EU |
| Backblaze | Encrypted backups | Netherlands (EU) | Processor | Stored in the EU |
| Cloudflare | DNS, email forwarding, the sign-in bot check (Turnstile) | EU; global network | Processor | Under Cloudflare’s data processing addendum |
| Sentry (Functional Software) | Error reports, with personal data removed | Germany (EU) | Processor | Stored in the EU |
| PostHog | Usage analytics without cookies, and A/B tests of the site | Germany (EU) | Processor | Stored in the EU |
| Zoho | Mailboxes for emails to prospective customers | EU; Zoho support may access it from India | Processor | SCCs with the UK Addendum, for support access from India |
| Smartlead (521 Products Pty Ltd) | Sending and scheduling emails to prospective customers | Australia (Amazon Web Services, Sydney) | Processor; an independent controller for its email warm-up | SCCs with the UK Addendum |
| Healthchecks.io | Checking that scheduled jobs ran | EU | Processor | No personal data |
| Anthropic | AI summaries of public notice text | United States | Processor | Public notice text only (title, buyer, description), contact details removed; a name a buyer wrote in a description may remain |
| Paddle.com | Payments, VAT and invoices, as merchant of record | UK and EU | Independent controller | Under Paddle’s own terms |
| Sign-in with Google, if you choose it | Global | Independent controller | Under Google’s own terms |