Security and privacy
Privacy boundaries for connected procurement and coordination
Vendinav separates public Vendor discovery from private commercial work. Vendor rooms are private from one another, the customer-facing room stays separate from supplier sourcing, and invited participants enter the relevant controlled experience through a secure link.
Vendor A and Vendor B receive separate rooms
A Buyer can invite multiple Vendors to one RFQ without creating a combined competing-Vendor conversation. Vendor A cannot see Vendor B's messages, files, quote revisions, pricing, or activity, and the same boundary applies in the other direction.
The Buyer sees the connected sourcing record required to review the work. Each Vendor sees only the room opened for that Vendor's participation.
Can competing Vendors see one another's commercial response?
No. Vendor conversations, files, revisions, and pricing remain in separate private rooms.
Customer participation and supplier sourcing remain different lanes
A customer can use the customer-facing room for its request, files, messages, and customer quote. Linked supplier sourcing occurs in the Company's Job, RFQs, and private Vendor rooms.
The customer cannot see supplier conversations, quotes, or pricing. The sourcing team can return an appropriate customer quote without exposing the internal commercial inputs used to prepare it.
Internal work references preserve existing authority
Share with Team can carry a Customer Room, Job, RFQ, Vendor Room, Accepted Work, or fulfillment reference into an internal Company conversation. The reference does not grant access the recipient does not already have. In a group, each participant's authority is evaluated independently.
Internal Company conversations stay internal even when they reference a customer-facing or Vendor-facing room. Customers and Vendors do not join the internal conversation, and internal messages are not mirrored into an external room.
Does sharing work with a coworker or group grant access?
No. The reference points to the work, but each participant must already have authority to open it. Group membership does not create universal access to every referenced record.
Can a Vendor see a Company's internal Messenger conversation?
No. Internal Company messages remain internal and are not copied or mirrored into the Vendor Room.
Shared discovery does not publish private Company work
Shared Vendor discovery can make public-facing Vendor identity and category information available for sourcing. It does not expose another Company's private commercial data, including relationships, conversations, quotes, pricing, private Vendor intelligence, notes, RFQ history, Accepted Work, or sourcing behavior. Other Companies cannot see a Company's private Vendor notes; Vendors, customers, and anonymous visitors cannot see them either.
Discovery is not a Vendor endorsement, ranking, or guarantee. Buyers remain responsible for selecting and evaluating the Vendors they choose to contact.
Secure guest participation reduces unnecessary account exposure
A Vendor or customer can open the appropriate secure link and work in the room intended for that request without creating a full Vendinav account. A secure link grants the controlled participation required for that experience; it does not turn private Company work into public content.
Are private rooms public or indexable?
No. Public product pages explain Vendinav, while account, Company, administrative, private room, onboarding, and billing surfaces are kept outside the public search architecture.
Public policies remain the authoritative source
Vendinav's Privacy Notice, Terms, AI Use Disclosure, Acceptable Use Policy, Subprocessors list, and Help page provide the authoritative public detail. This page describes visible product boundaries without inventing certifications, infrastructure guarantees, or sensitive implementation claims.
Where should a security or privacy concern be raised?
Use the contact route identified on the Help page or in the applicable policy so the concern reaches the appropriate Vendinav channel without placing private details on a public page.
Authoritative policies and contact routes
Evaluate the workflow with its privacy boundaries intact
Start with the Free plan and invite only the participants required for the next request. The public policies above remain available before and during evaluation.