Trust

Security & Data Protection

Procurement data includes prices, bids and bank details. Here is how the platform keeps each of them with the people entitled to see it.

Built in, not configured later

The controls enterprise IT asks about first

Single sign-on

Single sign-on over SAML 2.0 or OpenID Connect with your own identity provider, with SSO-only sign-in available per customer.

Separation between customers

Every record belongs to one customer, and every query is scoped to it — your data is never visible to another business on the platform.

Separation between suppliers

Suppliers see only their own bids, orders and documents. A rival's identity, price or rank is never shown to them.

Roles & approval controls

Role-based permissions on every action, approval hierarchies per entity, and maker-checker on supplier bank changes.

Append-only audit trail

Every approval, edit and AI action is recorded with who did it and when, and the log itself cannot be edited. Nothing is purged unless you turn on a data-retention policy.

Encryption

Data encrypted in transit and at rest, hosted on Microsoft Azure.

AI at work

Governed AI

AI is treated as another channel data can leave by — and controlled the same way.

Scoped context

AI only ever sees the data the requesting user is entitled to see, under the same rules as any other query.

Human approval

AI proposes; people decide. Awards, approvals and payments always wait for a person, and how much routine work an agent does alone is a setting you control.

Every action logged

Each AI suggestion and action is written to the audit trail with its reasoning and, where the feature produces one, its confidence.

Frequently Asked Questions

Yes. Each customer can sign in through their own identity provider over SAML 2.0 or OpenID Connect, and can make SSO the only way in.

No. Suppliers see only their own responses and documents. Rival identities, prices and ranks are never exposed to them.

No. AI context is assembled under the same access rules as any other query, so an AI feature only works with what the requesting user is entitled to see.

Running a vendor security review?

Talk to us and we'll walk your IT and security team through the controls.