Data residency
Your data is physically stored in Frankfurt and backed up in Amsterdam. Both locations fall under German and Dutch law, and therefore fully under the GDPR.
TenderB hosts all data exclusively in European data centres. No detours via the US, no legal grey areas. Your sensitive tender documents, company knowledge and submissions fall entirely under European legislation.
Tender documents contain commercially sensitive information: pricing strategies, technical solutions, personnel data and reference projects. If that data sits on servers owned by a non-European provider, it may fall under foreign legislation.
The US CLOUD Act gives American authorities the right to request data from American cloud providers, even if that data is physically located in Europe.
That applies to every provider with an American parent company, regardless of where the servers are located. This isn't a theoretical risk. TenderB eliminates this risk entirely. Our platform is built by a Dutch company (LemonB BV, Eindhoven), hosted on European infrastructure, and the legislation that applies to your data is exclusively European.
AWS EU-Frankfurt, Germany
One of the most secure data centres in the world. AWS EU-Frankfurt meets more than 143 security standards and compliance certifications, including the German C5 standard for cloud security. Data residency guaranteed within the EU.
For specific customers: Google Cloud EU-Hanau, Germany
ISO 27001, SOC 2 Type II, GDPR compliant. Data residency guaranteed within the EU.
EU-Amsterdam, the Netherlands
Multi-zone redundancy. Geographically separated from the primary hosting for maximum availability. Full data replication within EU borders.
Your data is physically stored in Frankfurt and backed up in Amsterdam. Both locations fall under German and Dutch law, and therefore fully under the GDPR.
No non-European government can legally compel access to your data. TenderB is a Dutch company (LemonB BV), based in Eindhoven. The entire legal chain is European. That also applies to metadata: logs, API calls and access patterns stay within the EU.
Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Key management remains under European control.
TenderB never uses your documents, text or company knowledge to train AI models. Your data is yours. Full stop.
When your subscription ends, all your data is completely and irrevocably deleted. No leftover data, no shadow copies.
“We deliver fifty thousand meals to hospitals in the Netherlands every day. TenderB met our compliance requirements immediately. Security without the hassle.”
Catering — Healthcare93 of 93 controls implemented. Externally audited by BeeAble. ISMS fully implemented and operational.
Fully compliant. Privacy Officer appointed. DPIA procedures in place. Data processing agreements available.
TenderB is the first AI tendering platform designed from the ground up with the European AI regulation being enforced from 2026 in mind.
Averaged over the last 30 days. Continuous monitoring and automatic failover ensure maximum availability.