Sub-processors
These are the companies that process personal data on our behalf when we provide ScoutTide to your organisation, under the Data Processing Addendum. The list is generated from the services this deployment is actually configured to use, and is the same list the privacy policy shows.
| Sub-processor | Purpose and data | Based in | Transfer safeguard |
|---|---|---|---|
| netcup GmbH (Germany) Hosting |
Everything the application stores, on the server it runs on. | Germany | Within the EEA |
| GoDaddy (GoDaddy.com, LLC, "Secureserver" mail) (United States) Email delivery (smtpout.secureserver.net) |
Your email address and the contents of every email ScoutTide sends: account emails (verification, password reset, invitations), billing and trial emails, the morning digest, messages sent through the contact and feedback forms, reminders to add a product, and service notices to organisation managers. | United States | Standard Contractual Clauses or an adequacy decision |
| Operator of api.gonka24.com AI model service (Gonka24) |
The text of the tender or post being worked on, plus your organisation profile and product descriptions, for matching, profile building, generating search feeds, reading tender documents and translation. No account credentials are ever sent. | Location not confirmed | Standard Contractual Clauses or an adequacy decision |
| Ollama, Inc. (United States) AI model service (Ollama) |
The text of the tender or post being worked on, plus your organisation profile and product descriptions, for matching, profile building, generating search feeds, reading tender documents and translation. No account credentials are ever sent. | United States | Standard Contractual Clauses or an adequacy decision |
| Bitdeer Technologies (Singapore) AI model service (Bitdeer AI) |
The text of the tender or post being worked on, plus your organisation profile and product descriptions, for matching, profile building, generating search feeds, reading tender documents and translation. No account credentials are ever sent. | Singapore | Standard Contractual Clauses or an adequacy decision |
| Bitdeer Technologies (Singapore) Text similarity (embeddings) |
A short excerpt of each tender or post and of your product descriptions, to find likely matches. No personal data about you is sent. | Singapore | Standard Contractual Clauses or an adequacy decision |
| Serper Web search (Serper) |
The search terms of feeds you create, for example an Upwork or LinkedIn query. No personal data is sent. | Location not confirmed | Standard Contractual Clauses or an adequacy decision |
| SerpApi (United States) Web search (SerpApi) |
The search terms of feeds you create, for example an Upwork or LinkedIn query. No personal data is sent. | United States | Standard Contractual Clauses or an adequacy decision |
| AlphaAI Technologies Inc. (Tavily) (United States) Web search (Tavily) |
The search terms of feeds you create, for example an Upwork or LinkedIn query. No personal data is sent. | United States | Standard Contractual Clauses or an adequacy decision |
| Exa (United States) Web search (Exa) |
The search terms of feeds you create, for example an Upwork or LinkedIn query. No personal data is sent. | United States | Standard Contractual Clauses or an adequacy decision |
| DataForSEO OÜ (Estonia) Web search (DataForSEO) |
The search terms of feeds you create, for example an Upwork or LinkedIn query. No personal data is sent. | Estonia | Within the EEA |
Recipients acting in their own right
These are not our sub-processors: each decides for itself how it handles the data it receives, under its own privacy policy. They are listed so the picture is complete.
| Recipient | What it receives | Based in |
|---|---|---|
| Google Ireland Ltd / Google LLC Google (Sign in with Google) |
Your name, email address and Google account identifier, when you choose to sign in with Google. | Ireland / United States |
| Paddle.com Market Ltd (United Kingdom) Payments (Paddle) |
Your organisation's name, the buyer's name, email address, country and payment details, to take payment, charge tax and issue invoices. Paddle is the merchant of record and handles this as a controller in its own right. | United Kingdom |
Changes to this list
Before we add or replace a sub-processor, we email the managers of every organisation at least 30 days before the change takes effect and update this page with a new date. If you have a reasonable, data protection based objection, tell us within that period through the contact form or at support@scouttide.com; if we cannot address it, you may end the affected service and we will refund any prepaid fees for the period after the change.