Subprocessors.
These are the third parties that process data on our behalf to run WonMetrics. This list is authoritative: if a company is not on it, it does not touch your data. We update it here before a change takes effect and notify customers, as required by our data processing agreement.
Last updated: 13 August 2026
| Subprocessor | What it does | Data it processes | Location |
|---|---|---|---|
| Lovable Cloud / Supabase | Application database and authentication for the dashboard at platform.wonmetrics.com | Account records, tracked-competitor lists, dossier and alert history; email address and authentication records | EU — to be confirmed |
| Railway | Hosts the Nordic Data API (api.addonnordic.dk), our own service that supplies the registry data behind supplier dossiers | Company identifiers in lookups; registry data in transit | EU (West) |
| Nordicway | Hosts this website (marketing pages and blog) | Server logs; contact form messages in transit | EU (Germany, Falkenstein) |
| Resend | Delivers transactional email — contact form messages and award digest alerts | Recipient address and message content | Sent from EU; logs in US |
| Stripe | Payment processing, invoicing and EU VAT handling | Billing details, VAT number, invoice records | EU and US — see Stripe’s DPA |
The data itself comes from public sources: contract-award notices from TED, the EU’s official publication channel for public contracts, and from Doffin for Norway, and company data from official national business registers. Those are sources we read from, not processors acting on our behalf — we send them a company identifier or a search query, never your data.
Changes to this list
We publish an intended change here before it takes effect and notify customers by email. If you object to a new subprocessor on reasonable grounds, write to contact@addonnordic.dk — the terms of that process are in the data processing agreement.