Sub-processors
The third parties materially involved in processing customer or user data on our behalf.
Last updated: 21 July 2026
TenderLift is operated by Ruzicic IT (Lugano, Switzerland). The table below lists the third-party providers that can receive, store, or transmit customer or user data as part of running the service. Some are used only for specific features — those are marked in the “When” column. Providers that only handle our own internal business data, public-data sources we read from (such as SIMAP and ZEFIX), and software we host ourselves are not sub-processors and are not listed. Cookieless, aggregate website-visitor analytics (Fathom) is described in our privacy policy rather than listed here, as it does not receive account or customer data.
Hosting & infrastructure
| Provider | Service / purpose | Data categories | Location | When |
|---|---|---|---|---|
| Hetzner Online GmbH | Core application and database hosting, including stored search embeddings. | Account and profile data, application data, uploaded-document text used to generate embeddings (embeddings themselves are stored here). | Germany (EU) | Always |
| Cloudflare, Inc. | Edge delivery, CDN and network security, object storage for uploaded documents, and embedding generation (Workers AI). | Traffic metadata and IP addresses at the edge; uploaded documents (object storage); document and search-query text sent for embedding. | Global edge network | Always |
AI processing
| Provider | Service / purpose | Data categories | Location | When |
|---|---|---|---|---|
| Anthropic | AI assistant, document question-answering, bid-review narratives, and company profile enrichment. | Your questions, relevant excerpts from tender and uploaded documents, and company-profile context. | United States | When you use AI features |
| OpenRouter | Routes AI requests for tender summaries, requirement extraction, bid-evidence matching, eligibility checks, and document text recognition (fallback) to the underlying model providers OpenAI, Google and Mistral. | Tender text, excerpts from uploaded documents, and company-profile context. | United States (routes to providers in the US and EU) | When you use AI features |
Product analytics
| Provider | Service / purpose | Data categories | Location | When |
|---|---|---|---|---|
| PostHog | Product analytics, feature flags, and — inside the signed-in app only — session replay with all form inputs masked. | Account identifier, email, name, subscription state, and product-usage events; masked in-app session recordings for signed-in customers. | European Union | Always (session replay: signed-in app users only) |
| Provider | Service / purpose | Data categories | Location | When |
|---|---|---|---|---|
| Resend | Transactional and notification email — verification codes, password resets, team invitations, and tender alerts and digests. | Your email address and the full content of the messages sent to you. | United States | Always |
| Loops | Lifecycle and product-marketing email. | Email, name, language, company name, canton, and subscription state. | United States | When you receive lifecycle or marketing email |
| Google (Google Workspace) | Business email; receives support messages you send to our support address. | The content of support emails you send us, and your email address. | Global (EU–US Data Privacy Framework) | When you contact support by email |
Payments
| Provider | Service / purpose | Data categories | Location | When |
|---|---|---|---|---|
| Stripe Payments Europe, Ltd. | Card payment processing for paid subscriptions. | Billing email, plan reference, and payment details entered on Stripe’s hosted checkout (card data is never handled by TenderLift). | Ireland (EU) | When you pay by card |
Where a provider processes data outside Switzerland or the EU/EEA, the transfer relies on a recognised safeguard — Standard Contractual Clauses and/or the EU–US Data Privacy Framework. Uploaded documents are held in Cloudflare R2 object storage; we do not currently claim a specific storage region for those files.
Some AI features route requests through OpenRouter to the underlying model providers named above; OpenAI may also be used directly as a fallback. We do not assert that these providers refrain from training on your data beyond each provider’s own applicable terms.
Keeping this list current
We do not operate a separate subscription for sub-processor change notices. This dated page is the canonical, current list — check back here, or write to us for the latest version in writing.
Questions about our sub-processors? privacy@tenderlift.ch