Your purchasing data should never be an automatic order to buy.
Supplier POs and financial document drafts require a separate approver. The service does not automatically email suppliers or pay invoices.
Customer records are scoped to company accounts. Independent penetration testing and production security certification have not yet been completed.
Login uses strong password hashing and HTTP-only sessions. The operator must configure HTTPS, encrypted storage keys, backups, retention and external service credentials before public launch.