Trust & data
Public procurement is a sensitive business context, so it is fair to ask where your data physically sits. Here is the complete answer, including the parts that are not simple.
Last reviewed: 1 November 2026
The Tendarix.ca application, its PostgreSQL database and its search index run on servers in Canada. Account records, saved searches, watchlists, bid drafts and analytics are stored there and are not replicated outside the country.
Everything in the feed originates from public Canadian procurement notices published by federal, provincial and municipal bodies. It is public information republished in a searchable form — we add translation, summaries and fit scoring, we do not add confidential material.
Some data can leave Canada. AI features (plain-language summaries, tender analysis, fit scores and Bid Studio drafts) are processed by Groq and Anthropic, email is delivered by Resend, and Google Analytics receives usage data if you accept analytics cookies. Payment card data, if you subscribe, is handled entirely by Stripe and never touches our servers. Only the text needed for an AI task is sent.
We keep the list short on purpose: DigitalOcean for hosting (Toronto, Canada), Groq and Anthropic for AI processing, Stripe for payments, Resend for email delivery, and Google Analytics if you accept analytics cookies. Each works under contractual confidentiality and data-protection terms. We will tell subscribers before adding a sub-processor that handles personal data.
Account data lives as long as the account does, and is deleted or anonymized within 90 days of closure, except records we must keep for tax, audit or accounting purposes. Analytics visits are pseudonymised and retained for 24 months. Newsletter records keep proof of consent for as long as CASL requires, and an unsubscribe is honoured immediately and permanently.
Under PIPEDA — and Québec’s Law 25 where it applies — you can ask for a copy of your data, have it corrected, or have it deleted. Write to us from the contact page and we will action it within 30 days.
If your organisation has a formal residency, security or accessibility requirement to satisfy before using Tendarix, contact us and we will answer the questionnaire directly rather than pointing you at a page.
Send the specific requirement and we will respond with a direct answer, not a brochure.