Security

Control over who sees what, and a record of everything.

Procurement data is commercially sensitive. Savvi protects it with strong sign-in, permissions down to the action, sealed bids and an audit trail that never forgets.

Sign-in

Two-factor sign-in, with passkeys.

Every account can use an authenticator app, a code by email or a passkey, with trusted devices so people aren't asked every time on their own laptop.

  • Authenticator app, email codes and passkeys
  • Trusted devices, remembered per person
  • Sign-in attempts rate limited
Permissions

Decide who sees costs, and who can award.

Roles are built from individual permissions, so finance can see spend without running tenders, and only the people you choose can sign off an award. What a role can't use is hidden, and every request is checked on the server.

Audit trail

Every change, who made it, and when.

Every create, change and delete is recorded, and each record has its own History panel: who updated a contract, who accepted a certificate, who extended a deadline, who signed off the award.

  • Before-and-after detail for every change
  • Actions taken on someone's behalf recorded as such
  • The evidence your auditors ask for, without assembling it
Policy

Your procurement rules, enforced.

Approval bands, routes, named approvers and supplier limits are set to match your policy. Savvi checks every tender against them, records any exception with a reason, and makes sure nobody approves their own award.

Supplier access

Suppliers see their bid, and nothing else.

Each supplier contact has a personal link that opens only their own submission. Links can be revoked at any time, bids are sealed until the round closes, and your benchmarks and flags are never shown to bidders.

AI you control

Intelligence, without giving up control.

AI is off until an administrator connects a provider. Keys are encrypted, each feature can use a different model, spending has a monthly budget, and every request is traced. It suggests; people decide.

  • Suggestions only: changes are applied by people, with their permissions
  • The same access rules as the person asking
  • Monthly budget, cost tracking and a record of every request
Infrastructure

Built on solid ground.

  • Hosted on AWSRun on Amazon Web Services, with the database and services on private networks.
  • Private file storageDocuments and certificates are never public: they're fetched through the app, for people allowed to see them.
  • Secrets encryptedEmail passwords and AI provider keys are stored encrypted and never shown again in full.
  • Rate limitingSign-in and other sensitive actions are rate limited to slow down guessing.
  • Error monitoringProblems are reported to our team with ids, never the content of your records.
  • Always up to dateInstalls as an app on desktop and mobile, and offers each new release with one click.

Questions

Where is our data hosted?

[to be supplied: confirm the AWS region, e.g. London (eu-west-2), and backup arrangements]

Can we control who sees costs and who can award?

Yes. Roles are made of individual permissions, such as viewing contracts and costs, managing suppliers, running tenders and signing off awards. People only see the parts of Savvi their role allows, and every request is checked on the server, not just hidden in the screen.

Is every change recorded?

Yes. Every create, change and delete is recorded with who did it and when, and each record has a History panel showing what changed. If an administrator acts on someone's behalf, that is recorded too.

How are supplier links kept secure?

Each supplier contact gets their own link. Links are stored in a form that can't be read back, can be revoked per contact at any time, and show when they were last used. Bids stay sealed until the round closes.

Does the AI make decisions?

No. It suggests and explains. Anything it proposes is applied by a person, through the same permissions and audit trail as any other change. AI is off until an administrator turns it on, with a monthly budget and a record of every request.

Explore the platform

Questions from your IT team?

We're happy to walk them through how Savvi is built and run.