Security
Keep prices, terms and names inside your workspace
Contracts are some of the most sensitive documents a company holds. These are the controls the product applies today, stated without claims it cannot back.
Proposal from renewal-review
Waiting for youAssign Fenwick Data Labs to Maija Meikäläinen
Rationale: the Analytics budget area holds both analytics vendors, and nobody owns this one.
Controls
Check the defaults every workspace gets
Workspace isolation on the server
Every query and change resolves your workspace from your session. A request cannot name another workspace, and a record from one cannot be read from another.
Sign-in through WorkOS
Authentication and workspace membership run through WorkOS. We never see your password.
Roles and budget-area scope
Members get a role, and can be limited to the budget areas they work in. Totals respect the same limits.
An attributed log of every change
Each change records whether a person, an agent or the system made it, and who.
Encryption in transit
The site and the app are served over HTTPS only, with strict transport security.
Deletion on request
An owner can delete the workspace and everything in it, or ask us to.
Agents
Let agents help without handing them the keys
Every action in the product carries a class, and the class decides what an agent may do, whichever way it connects.
Reads and reversible writes run
Inside the key's scope and ceiling, and logged.
Sensitive changes wait for a person
Owner, value and term changes become proposals.
Irreversible actions never run
Deletions and outside sends are always done by a person.
- 1
Read renewals due in the next 90 days
renewals_calendar
- 2
List open findings for those vendors
tasks_list
- 3
Check for duplicate vendors
vendors_findDuplicates
- 4
Propose an owner for Fenwick Data Labs
proposals_create
- 5
Summarise what you can still act on
Documents
Find the paperwork your reviewers will ask for
Ask for anything not listed here at support@vendorsqueezer.com.
- Privacy policyWhat we collect and every service that processes it
- Terms of serviceThe terms for using the product
- Data processing agreementOn request while early access runs
Questions
Frequently asked questions
Do you hold a security certification?
Not yet, and this page will not claim one before it is true. The controls on this page describe how the product works today.
Who can see our contracts?
Members of your workspace, limited by their role and any budget-area scope, and agent keys your administrators issue. The server checks every request against those rules.
Is our data used to train models?
No. Your records are not used to train models, and they are not shared with other customers.
How do we delete our data?
An owner can delete the workspace from its settings, which removes its vendors, contracts, documents and logs. You can also write to us and we will delete it.