Subprocessors
In short: 4 companies help us run the Service. AI model providers are not on this list because your organization picks them and uses its own keys.
1. Current subprocessors
Bidderist uses the following subprocessors to provide the Service. Each is bound by data processing terms at least as protective as our Data Processing Addendum, with Standard Contractual Clauses where data leaves the EEA or UK.
| Subprocessor | Purpose | Personal data | Location |
|---|---|---|---|
| Supabase, Inc. | Database, authentication, file storage and background functions | All customer data and account data | United States (company); data stored in our production hosting region |
| Vercel, Inc. | Application hosting and content delivery | Request data in transit, server logs | United States; global edge network |
| Resend (Plus Five Five, Inc.) | Transactional and notification email delivery | Recipient name and email, notification content | United States |
| Jina AI | Text embeddings for organizational memory search | Short text summaries of bid outcomes, notes, references and CVs | Germany |
2. Services your organization chooses
These services receive data only when your organization or a member turns them on, under that organization’s own account and terms with the provider. They are not Bidderist’s subprocessors.
| Service | When data is shared |
|---|---|
| Google (Sign in with Google) | Only if you choose to sign in with a Google account. |
| AI model providers (Anthropic, OpenAI, Google Gemini, OpenRouter) | Only for AI features your organization turns on, using API keys your organization supplies. A local model endpoint keeps this data on your own infrastructure. |
| MCP clients (for example Claude or ChatGPT) | Only if a member connects an AI assistant to BidderOps through the MCP integration. |
Discovery also fetches public tender notices from sources such as TED and the World Bank. No customer data is sent to those sources.
3. Changes and notifications
We give at least 30 days’ notice before adding or replacing a subprocessor by updating this page and emailing organization owners. To also receive notices at another address, or to object to a change, email privacy@bidderops.com.