← Project index02 / Permission-aware enterprise AI

Vendorsify AI

Enterprise vendor intelligence at the speed of a question.

AI Product Engineer and Backend Integration Engineer
Enterprise procurement and vendor-management product team
Integrated into a live enterprise platform

The product

A controlled intelligence layer that answers questions across vendor risk, contracts, compliance, payments, assessments, and tasks using live, permission-scoped records instead of generic model knowledge.

Real product / 66 seconds

Ask a question. Resolve the vendor. Respect permission scope. Return grounded records.

Vendorsify AI, enterprise assistant in context

System view

The product path, reduced to the decisions that make it reliable.

A permission-aware path from question to evidence42 approved tools · 0 write actions
18supported enterprise query categories
42allowlisted data tools and platform endpoints
96.4%vendor-entity resolution accuracy
94.8%grounded-answer accuracy
98.1%multi-turn reference-resolution accuracy
100%permission-boundary test pass rate
0unauthorized write actions available to the model
73% fasterthan manually locating information across platform modules
4.2 secmedian response time
~12 hoursoperational time recovered monthly at 150 benchmarked questions

A question is only the visible layer

Vendorsify AI turns an organization’s vendor portfolio into a permission-aware conversation. A procurement leader can ask which vendors carry the highest risk, follow with “tell me more about the first one,” check a SOC 2 expiration date, find contracts expiring this quarter, or review overdue assessments and assigned tasks.

Answering those questions reliably means coordinating data from vendors, contracts, certifications, risk, payments, assessments, spend, ownership, tasks, and workflows. The assistant cannot fall back to generic internet knowledge when a record is missing, and it cannot be allowed to improvise calculations or cross a user’s permission boundary.

The query-to-answer path

  1. Interpret the operational intent and identify the required business entities.
  2. Resolve vendor names and references carried over from earlier turns.
  3. Establish the user’s accessible organizational scope.
  4. Select from 42 explicitly approved, read-only tools and endpoints.
  5. Retrieve structured platform records.
  6. Compute totals, comparisons, and rankings deterministically.
  7. Validate dates, numbers, and other critical facts.
  8. Generate a concise answer and retain only the context needed for the next question.

This architecture supports 18 enterprise query categories while exposing zero unauthorized write actions to the model.

Reliability before fluency

The system’s safeguards are part of the product, not a wrapper around it. Retrieval is permission-scoped at the source. Tool access is allowlisted. Entity resolution is checked before records are combined. Structured response validation catches malformed results, and explicit missing-data behavior prevents a fluent answer from concealing an absent fact.

Totals and rankings are computed outside the language model, keeping financially or operationally important answers reproducible. Audit-friendly logs make the path from question to source records inspectable.

Measured workflow impact

Evaluation covered vendor identification, grounded answers, follow-up reference resolution, permissions, and response time. The system reached 96.4% vendor-entity resolution accuracy, 94.8% grounded-answer accuracy, and 98.1% multi-turn reference-resolution accuracy, with a 100% permission-boundary test pass rate and a median response time of 4.2 seconds.

In benchmarked internal workflows, a common vendor-information task fell from 6 minutes 40 seconds to 1 minute 48 seconds, a 73% reduction. At 150 questions per month, that represents approximately 12 hours of operational time recovered.

Product contribution

My work connected the language-model layer to an existing enterprise product without weakening its operational rules. It combined tool orchestration, backend integration, context management, permission design, evaluation, hallucination reduction, and executive-facing product decisions into one controlled workflow.