A supplier risk desk that holds the line while people decide.
The supplier risk desk watches the changes your procurement team cannot watch every day. It blocks new orders while a change is reviewed, gathers what the reviewer needs, and lifts the block when the evidence is in.
Changes in feeds and records: a sanctions list update, a credit rating drop, an insurance or certification expiry date, bank details changed in the supplier master.
It reads the supplier master, open orders, payment history and the risk feeds. It writes one flag: a block on new orders.
You choose the feeds, the suppliers in scope, and which changes it may act on alone. Sanctions matches always go to a person at once.
It never ends a relationship, never contacts a supplier, and never changes bank details. A bank-detail change is confirmed by a person’s callback.
“Watch our suppliers’ risk feeds and records. Block new orders while a change is reviewed, ask the supplier’s owner for updated evidence, escalate any sanctions match at once, and lift the block when the review passes. Report to the procurement lead.”
The floors no configuration can weaken
Seven limits sit under every level, level 5 included. Your own limits can only tighten them.
A person decides. The threshold is yours to lower, never to remove.
Nothing is signed, agreed, or terminated without a person.
A relationship is not a record to be closed. It stops with a person.
Reporting lines, roles, and who is accountable are set by people.
No AI employee can raise its own level or anyone else’s.
Anything leaving the organisation is gated, whatever the level.
Handled under your rules, with a person deciding on anything that acts on it.
An expiry blocked, and a bank-detail change escalated before a payment run.
Each record keeps when every change happened against when every payment was due, so the question “did we know before we paid” has an exact answer.
What was known when: the change is recorded with the time it landed, before the run was prepared.
Expiries are found when someone happens to check.
Expiries block new orders when they pass.
A bank-detail change is checked by whoever sees it first.
Every bank-detail change is escalated for a person’s callback before the next run.
Nobody can say what was known before a payment.
Every change is kept with when it happened, against every payment.
Two weeks on last quarter’s supplier changes.
It proposes a decision for every supplier change recorded last quarter. You compare its proposals with what your team did, and nothing in your systems changes.
Two-week retrospective evaluation
You see which changes it would have blocked, escalated or cleared, and which payments went out while a change was unreviewed.
Budgeted like an operational role · Zero token metering
Expenditure is tied to completed operational outcomes, not token consumption or prompt volume. A high-volume month or quarter never generates a variable surprise bill, providing fixed annual forecasting for CAIOs, CFOs, and Procurement leads.
Supplier risk watch
The pilot role. Routine expiries blocked, sanctions and rating changes escalated at once.
Spend approvals
Decides purchase requisitions within budget, policy and its band.
Control monitoring
Tests financial controls on schedule and raises every failure to its owner.

