01About this list
Subprocessors are the vendors that process personal data on our behalf. Each one is under a written data-protection agreement. We update this page when we approve a new vendor.
02Service subprocessors
These vendors process customer platform data. All are located in the United States.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Bubble Group, Inc. | Application hosting, database and file storage | Account profiles, RFQ and supplier contact data, uploaded files | United States |
| Amazon Web Services, Inc. | Cloud infrastructure, object storage including drawing ingest, serverless compute, and transactional email relay | The same data as above, plus logs and email recipients | United States (us-east-1) |
| Anthropic, PBC, via AWS Bedrock | AI drafting of RFQ, negotiation and analysis text | Prompt content sent to the model, which may include names, email addresses and quote text | United States |
03Website processors
These vendors process data from our website, not customer platform data. They load only with your consent. See our Cookie Policy.
| Processor | Purpose | Location |
|---|---|---|
| Google LLC | Google Analytics | United States |
| LinkedIn Corporation / Microsoft | Ads measurement via the LinkedIn Insight Tag | United States |
04Notice of new subprocessors
EU and UK customers get at least 14 days' notice before a new service subprocessor goes live. The exception is an emergency replacement for security reasons. A customer that objects may terminate the affected Service as described in the DPA.
05Contact
Questions: privacy@procurable.ai.