Data Processing Agreement

Roles of the parties

For the personal data contained in tenders and project data you upload, you (the customer) act as the data controller and TenderCompare AI acts as the data processor, processing data only on your documented instructions.

Scope and purpose

We process your data solely to provide the tender analysis service — extraction, comparison, reporting and storage — for the duration of your subscription.

Security measures

Data is encrypted in transit and at rest, access is restricted on a need-to-know basis, and infrastructure is hosted in the UK/EU. See our Security page for more detail.

Sub-processors

We use a limited set of sub-processors (cloud hosting and AI processing) bound by equivalent data protection obligations. A current list is available on request, and we give notice of material changes.

International transfers

Personal data is processed within the UK/EU. Where any transfer outside the UK/EEA is necessary, it is covered by appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

Data subject rights and assistance

We assist you in responding to data subject requests and in meeting your obligations regarding security, breach notification and data protection impact assessments.

Deletion and return

On termination, we delete or return your personal data within 30 days, except where retention is required by law.

Request a signed DPA

Email privacy@tendercompare.ai to receive a countersignable copy for your records.