Xalios
Get a Demo
← All use casesUse case blueprint · CMP-02

Supplier risk acted on when it changes, by an AI employee that can block an order but never end a relationship.

A supplier risk desk that watches sanctions lists, credit ratings, expiry dates and bank-detail changes, blocks new orders while a change is reviewed, and leaves ending a relationship and every payment above your threshold to a person.

Start a two-week pilot→Review the role
At a glance
Function
Compliance
Role
Supplier risk desk
Reports to the procurement lead
Starts with
A change in a feed
Sanctions, rating, expiry, bank details
Decides
Block, watch, chase or clear
New orders, pending review
Earns
One kind of change at a time
Promoted by the procurement lead
Never
Ends a supplier relationship
That stays with a person
Module 01 · Role and limits

A supplier risk desk that holds the line while people decide.

The supplier risk desk watches the changes your procurement team cannot watch every day. It blocks new orders while a change is reviewed, gathers what the reviewer needs, and lifts the block when the evidence is in.

01
Where the work comes from

Changes in feeds and records: a sanctions list update, a credit rating drop, an insurance or certification expiry date, bank details changed in the supplier master.

Sanctions listsCredit ratingsExpiry datesBank-detail changes
02
What it can see and change

It reads the supplier master, open orders, payment history and the risk feeds. It writes one flag: a block on new orders.

Supplier master (read)Risk feeds (read)Order block (write)
03
The limits you set

You choose the feeds, the suppliers in scope, and which changes it may act on alone. Sanctions matches always go to a person at once.

Feeds in scopeSuppliers in scopeSanctions to a person
04
What it never does

It never ends a relationship, never contacts a supplier, and never changes bank details. A bank-detail change is confirmed by a person’s callback.

Ending a relationshipSupplier told by its ownerCallback by a person
Job description

“Watch our suppliers’ risk feeds and records. Block new orders while a change is reviewed, ask the supplier’s owner for updated evidence, escalate any sanctions match at once, and lift the block when the review passes. Report to the procurement lead.”

RoleSupplier risk desk
Reports toProcurement lead
EscalationProcurement lead, then compliance
ScopeThe suppliers and feeds you name
System accessSupplier master, orders, payments, risk feeds (read); order block (write)
LimitsEnding a relationship, payments above your threshold and bank-detail changes stay with people
Approve the hireNothing runs until you do.

The floors no configuration can weaken

Seven limits sit under every level, level 5 included. Your own limits can only tighten them.

 01
Payments above your threshold

A person decides. The threshold is yours to lower, never to remove.

 02
Irreversible legal commitments

Nothing is signed, agreed, or terminated without a person.

 03
Ending a customer or supplier relationship

A relationship is not a record to be closed. It stops with a person.

 04
Changing organisational structure

Reporting lines, roles, and who is accountable are set by people.

 05
Granting another AI employee autonomy

No AI employee can raise its own level or anyone else’s.

 06
Reaching outside your boundary

Anything leaving the organisation is gated, whatever the level.

 07
Anything touching personal data

Handled under your rules, with a person deciding on anything that acts on it.

Module 02 · Governance

Risk authority is earned one kind of change at a time.

Every promotion is the procurement lead’s decision. Demotion is automatic: blocks lifted as unnecessary, or clears that are later reversed, drop it a level with the reason attached.

LevelWhenAuthority and supervision
LEVEL 1Day one
In training
What it may decide

Proposes block, watch or clear for every change.

What its supervisor does

The procurement lead decides each one.

LEVEL 2When promoted
Supervised
What it may decide

Gathers open orders, recent payments and the change history, and proposes with them.

What its supervisor does

Approves or corrects every proposal.

LEVEL 3When promoted
Semi-autonomous
What it may decide

Blocks new orders on routine expiries. Escalates sanctions and rating changes.

What its supervisor does

Takes the escalations.

LEVEL 4When promoted
Autonomous
What it may decide

Runs the watch end to end: blocks, chases internal owners, lifts blocks when the evidence is in.

What its supervisor does

Reviews the record. Can withdraw the level at any point.

LEVEL 5When promoted
Fully trusted
What it may decide

Its widest set of suppliers and feeds.

What its supervisor does

Ending a relationship still stays with a person.

LEVEL 2When it happens
Automatic demotionautomatic
What it may decide

Blocks lifted as unnecessary, or clears later reversed, drop it to level 2 on its own.

What its supervisor does

The procurement lead sees the reason on the record and restores the level when it is earned again.

Module 03 · Decisions on the record

An expiry blocked, and a bank-detail change escalated before a payment run.

Each record keeps when every change happened against when every payment was due, so the question “did we know before we paid” has an exact answer.

Record A: SUP-4410Blocked pending review
Insurance expiry date passed
ArrivedAn insurance expiry date passed in the supplier master.
KnewTwo open orders, and no payment due this week.
PermittedBlock new orders on routine expiries at level 3.
DecidedBlocked new orders and asked the supplier’s owner for the renewal.
Confirmed byWithin its authority. The block lifted when the renewal was recorded.
Record B: SUP-4432Escalated before the run
Bank details changed before a payment run
ArrivedBank details changed in the supplier master.
KnewA payment to this supplier is due in the next run.
PermittedBlock and escalate. Bank-detail changes are confirmed by a person.
DecidedEscalated before the payment run, with when the change was made against when the payment was due.
Confirmed byThe procurement lead, who held the payment until a callback confirmed the change.

What was known when: the change is recorded with the time it landed, before the run was prepared.

Module 04 · What changes

What the pilot measures

Measures agreed with you before the pilot starts, read from the decision record rather than reported by hand.

01
Changes acted on within authority

The share of changes it blocked, chased or cleared on its own, at each level.

02
Blocks lifted as unnecessary

Blocks a reviewer judged unneeded. Promotion and demotion run on it.

03
Payments to suppliers under review

Payments released while a change was still being reviewed.

04
Time from change to action

From the feed or record changing to a block or an escalation.

Supplier risk today
With a supplier risk desk
Supplier risk today

Expiries are found when someone happens to check.

With a supplier risk desk

Expiries block new orders when they pass.

Supplier risk today

A bank-detail change is checked by whoever sees it first.

With a supplier risk desk

Every bank-detail change is escalated for a person’s callback before the next run.

Supplier risk today

Nobody can say what was known before a payment.

With a supplier risk desk

Every change is kept with when it happened, against every payment.

Module 05 · Pilot

Two weeks on last quarter’s supplier changes.

It proposes a decision for every supplier change recorded last quarter. You compare its proposals with what your team did, and nothing in your systems changes.

Proof of value

Two-week retrospective evaluation

You see which changes it would have blocked, escalated or cleared, and which payments went out while a change was unreviewed.

TimeframeTwo weeks
Work usedLast quarter’s supplier changes
Your timeThe procurement lead, an hour a week
System changesNone. It proposes only
Start a two-week pilot→
Commercial predictability

Budgeted like an operational role · Zero token metering

Expenditure is tied to completed operational outcomes, not token consumption or prompt volume. A high-volume month or quarter never generates a variable surprise bill, providing fixed annual forecasting for CAIOs, CFOs, and Procurement leads.

01
Role 1first

Supplier risk watch

The pilot role. Routine expiries blocked, sanctions and rating changes escalated at once.

Level 3 as the target
02
Role 2next

Spend approvals

Decides purchase requisitions within budget, policy and its band.

Starts at level 1
03
Role 3later

Control monitoring

Tests financial controls on schedule and raises every failure to its owner.

Starts at level 1
Before anything runs

Your limits set, the floors in place, and a named person it reports to.

Book a technical briefing→