Last updated: 08 September 2025
We work with a small number of trusted third-party providers to help us deliver the Tendr Platform reliably and securely. These providers are known as sub-processors because, in some cases, they may handle limited personal data on behalf of our clients and their employees (for example, to host our cloud infrastructure or process payments).
We carefully select and review all of our sub-processors. Each provider is contractually bound to meet strict data protection and security standards that are consistent with the UK GDPR and EU GDPR. Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses.
The table below lists our current sub-processors, what they do, and where they process data. We keep this list up to date, and clients are notified of any changes in line with their Data Processing Agreement.
| Category | Sub-processor | Location of Processing | Purpose of Processing |
|---|---|---|---|
| Infrastructure Hosting | Amazon Web Services (AWS) | United Kingdom (London region) | Cloud infrastructure hosting, storage, database services |
| Payment Processing | Stripe, Inc. | EU/EEA, United States* | Payment processing and card transaction settlement |
| Open Banking | TrueLayer Limited | United Kingdom, EU | Open banking connections, bank payments |
| Gift Card Aggregators | Tillo Ltd | United Kingdom | Sourcing and fulfilment of digital gift cards |
| Blackhawk Network | United Kingdom / EU | Sourcing and fulfilment of digital gift cards | |
| Runa (formerly WeGift) | United Kingdom | Sourcing and fulfilment of digital gift cards | |
| Analytics | Mixpanel, Inc. (EU Service) | EU (Frankfurt) | Product analytics, usage tracking |
| Internal Collaboration & Support Tools | Slack Technologies, LLC | United States* | Internal communications and support ticket collaboration |
| Atlassian Trello, Inc. | United States* | Internal communications and support ticket collaboration | |
| Error Monitoring | Functional Software, Inc. (Sentry) | EU & United States* | Application error tracking and monitoring |
| Email Delivery | Twilio SendGrid, Inc. | United States* | Transactional and notification email delivery |
| Finance & Invoicing | Xero Limited | New Zealand, United States, Australia* | Client invoicing, billing records, financial administration |
*Note: Some providers (e.g. Stripe, Intercom, Slack, Trello, Sentry, SendGrid, Xero) may transfer data outside the UK/EU. Tendr ensures appropriate safeguards are in place in line with GDPR requirements (such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses).
Tendr may update this list from time to time as we add or replace sub-processors. Clients will be notified of any such changes in accordance with their Data Processing Agreement and may object within the timeframe specified there.