Changelog

We’re going to hold steady at V0.99. Not because we’re not iterating, but because we’re not quite ready for our big launch.

Until then we will keep updating this page periodically to make sure enhancements and tweaks are captured.

Stuff Users Care About (Procurement Teams & Stakeholders)

Surveys & Feedback

• AI-powered conversational surveys with dynamic follow-ups

• Token-based public survey links (no login required)

• Bulk CSV invitations with tracking and automated reminders

• Real-time response dashboards with PVX scoring and NPS

• Automated theme extraction and sentiment analysis

• AI-generated insights: urgent actions, quick wins, strengths, training needs

• Recommended actions with estimated impact, timeline, and effort

Supplier Intelligence

• 360-degree supplier profiles with contacts, diversity tracking, and notes

• Real-time supplier alerts, risks, and opportunities

• AI-generated executive briefings per supplier

• Email triage — automatic classification by urgency, relevance, category

• Strategic signal extraction from supplier emails

Spend & Category Management

• CSV spend upload with flexible column mapping

• Automatic supplier matching with alias resolution

• Spend summary by category with annual tracking

• AI-generated category strategies

Compliance

• CSRD compliance dashboard and AI-generated sustainability statements

• Modern Slavery compliance statements with supplier attestation workflows

Supplier Relationship Management

• SRM charter creation with relationship health analysis

• Kanban-style action tracking tied to survey insights

• Strategic imperatives with configurable weighting

Dashboards & UX

• Main dashboard, global analytics, 12-month trends

• Reality check — perception vs. reality gap detection

• Dark mode, responsive design, in-app notifications

Stuff ICT People Care About (Security, Integration, Architecture)

• Envelope encryption (GCP Secret Manager → per-tenant keys → data)

• Zero-downtime master and tenant key rotation

• JWT authentication, CORS, CSP headers, rate limiting

• Input validation on all endpoints

• Container vulnerability scanning

• Azure AD SSO / OAuth integration

• Multi-tenant architecture with strict row-level security

• GDPR audit log for data access tracking

• User consent tracking with timestamped logs

• User-initiated data deletion requests

• Cookie consent management

• Per-tenant privacy configuration

• Automatic PII detection and AES-256-GCM encryption

• Email audit trail and quota tracking per tenant

• Azure Graph API integration (email & SSO)

• Role-based access control (user, user admin, channel partner, superuser)

• Platform-wide audit logging