Mercanis
Mercanis is an AI procurement platform from Berlin that unifies intake, sourcing, supplier management, contracts, risk and spend analytics in one workspace, with autonomous agents assisting each stage. Pricing is quoted on request only.
What is Mercanis?
Mercanis is an AI-driven procurement platform published by CdC3 GmbH, a Berlin company that trades under the Mercanis brand. It covers the source-to-contract cycle in a single workspace rather than as a layer added on top of an existing suite, and organises that cycle around seven modules: intake, sourcing, supplier management, contract management, analytics, risk and compliance, and AI orchestration.
Intake captures purchase requests through structured forms and routes them automatically, so that approvals keep their context and leave an audit trail. Sourcing takes a request from RFx through to supplier selection, with AI comparing suppliers, prices and terms. Supplier management keeps vendor records and performance data current in one place. Contract management tracks, versions and renews agreements. Analytics reports on spend, cycle times and savings, while the risk module monitors supplier health and regulatory change. AI orchestration coordinates these flows. The vendor states that specialised agents assist each stage, although the count varies across its own pages: the homepage announces 55 agents while the dedicated agent page says 50+.
The product is delivered as two web portals, one for buyers and one for suppliers, the latter giving vendors their own onboarding and collaboration space. Mercanis targets mid-market and large European organisations and names six industries: energy and utilities, chemicals and pharmaceuticals, automotive, consumer goods, manufacturing, and construction and engineering. It addresses eight roles explicitly, from requester and buyer through to CPO and CFO, which reflects an intent to bring finance and legal into the same flow as procurement.
Integrations are declared with SAP, NetSuite, Slack and Microsoft Teams, and four partnerships are named: Unite, IntegrityNext, Prewave and Coface. The company reports more than 80 customers and claims over €70 billion in annual spend under management, alongside recognition from Gartner, SpendMatters and Frost & Sullivan.
There is no public pricing, no free plan and no free trial: the only route in is a booked consultation. The interface is served in English and German, and the vendor states that data is hosted in the EU.
What it does
- Capture and route purchase requests through structured intake forms
- Run sourcing events from RFx through to supplier selection with AI comparison of prices and terms
- Maintain supplier records, performance data and onboarding in one place
- Track, version and renew contracts across their lifecycle
- Monitor supplier risk and regulatory change continuously
- Analyse spend, cycle times and realised savings
- Coordinate the whole procurement workflow through orchestrated AI agents
When to use Mercanis / When not to
A quick filter to help you decide if Mercanis is the right fit.
When to use Mercanis
- Procurement and purchasing teams in mid-market or large European companies running sourcing, supplier and contract work in parallel
- CPOs and heads of procurement who want intake, sourcing, contracts and analytics in one system instead of several disconnected tools
- Category managers and strategic sourcing managers who run frequent RFx cycles and compare suppliers on price and terms
- Finance and controlling teams that need spend visibility and audit-ready approval trails shared with procurement
- Organisations in regulated or supply-chain-intensive industries (energy, chemicals and pharma, automotive, manufacturing, construction) that require EU data hosting
When not to use Mercanis
- Small businesses or individual buyers, since there is no self-service sign-up and every engagement starts with a sales consultation
- Anyone who needs to compare costs before talking to a vendor, as no price, plan or tier is published anywhere on the site
- Teams looking for a free plan or a trial period to evaluate the product independently, neither of which is offered
- Developers wanting to build on a documented public API, as no API reference or developer portal is published
- Users who need the product in a language other than English or German, or on a mobile app, which does not exist
How to use Mercanis
A typical end-to-end flow, from setup to results.
- Identify which parts of the cycle you want to cover, since the platform is sold as a suite of seven modules
- Book a meeting through the contact form, which is the only public entry point to the product
- Attend the initial consultation, presented by the vendor as personal, non-binding and free of charge
- Agree commercial terms directly with the vendor, as no price list or plan is published
- Review the customer terms and the applicable Data Processing Agreement before signing
- Decide whether to run Mercanis standalone or integrated with your existing ERP and SRM systems
- Set up the connections to systems such as SAP, NetSuite, Slack or Microsoft Teams as needed
- Configure intake forms, approval routing and category structures to match your policies
- Onboard your suppliers onto the dedicated supplier portal
- Roll out to buyers, requesters, finance and legal, then use the analytics module to track adoption and cycle times
Pros & Cons
Pros
- Broad functional coverage in one platform, spanning intake, sourcing, supplier management, contracts, risk and analytics
- Fully published and verifiable legal identity, with company number, VAT number and registered address all consistent with the commercial register
- EU data hosting stated by the vendor, German publisher and German governing law in the customer terms
- Named, checkable customer references including BASF, GASAG, Goldbeck, Amer Sports, Oventrop and AWG
- Recent and substantial funding, with a Series A announced in June 2025 after an earlier round in 2023
- Declared integrations with major ERP systems, notably SAP and NetSuite, plus four named partner platforms
- Bilingual English and German interface, with the German version fully mirrored across the site
Cons
- No public pricing of any kind: no amount, plan or tier is published anywhere across the site's 493 indexed pages
- No free plan and no free trial is offered, so the product cannot be evaluated without engaging the sales team
- The advertised SOC certification is not supported: the customer terms only state that the vendor is guided by the five principles of SOC 2 and audited accordingly, without a certificate number, a certification body or a published report
- The list of sub-processors is available on request rather than published, which limits what can be assessed before contracting
- No public API documentation or developer portal, so programmatic access cannot be assessed even though the site advertises integration through secure APIs
- The privacy policy covers the website, marketing and recruiting, not the processing of customer data inside the platform
- Several published URLs are dead ends that silently serve the homepage, including the Data Processing Agreement link printed in the customer terms
Pricing & Plans
Mercanis does not publish any pricing. There is no free plan and no free trial, and no amount, currency or billing unit appears anywhere on the site: an enumeration of the 493 URLs listed in the sitemap returned no pricing page, and the /pricing path itself serves the homepage rather than a tariff. The commercial model is quotation-based, with the only public entry point being a booked consultation, which the vendor describes as personal, non-binding and free of charge. Prospective buyers should therefore expect an enterprise negotiation and should ask explicitly about the scope of modules included, the number of users covered and any onboarding fees, none of which can be inferred from public information.
Data, GDPR & hosting
A consolidated view of how Mercanis handles your data.
GDPR overview
GDPR implementation is explicit and detailed on the website side. The privacy policy is built around the Regulation, citing Article 6(1)(a), (b), (c) and (f) as legal bases, listing data subject rights (access, rectification, erasure, portability and objection) and the right to lodge a complaint with a supervisory authority. German BDSG and TMG provisions are cited alongside. An external data protection officer is named, and the product pages state that data is hosted in the EU and safeguarded under GDPR. Two limits should be noted. The policy covers the website, marketing and recruiting, not the processing of customer data inside the platform. And the list of processors operating outside the EU is available on request rather than published. No Article 27 representative is designated, which is consistent with the publisher being established in Germany.
Who owns the data?
The data controller named in the privacy policy is CdC3 GmbH, Greifswalder Str. 208, 10405 Berlin, registered at the local court of Charlottenburg under HRB 221095 B and represented by Fabian Heinrich. An external data protection officer, PROLIANCE GmbH in Munich, is designated. An important limit applies: the published privacy policy describes the website, its marketing and its recruiting activity. It does not set out who owns or controls the customer data processed inside the procurement platform itself. The customer terms make a separate Data Processing Agreement applicable to the contract, but that document is not readable online, so platform-side ownership terms cannot be confirmed from public sources.
Reuse rights
The public documents do not grant the end user any explicit right to reuse data beyond normal use of the service, and they do not restrict it either: the question is simply not addressed in the material published on the site. What the privacy policy does describe concerns the website rather than the platform. Personal data collected through the site is processed on the legal bases of Article 6(1)(a), (b), (c) and (f) GDPR, for commercial contact, recruitment, audience measurement and social media. Named third-party tools include Google Analytics, HubSpot, Zapier, Greenhouse, Recruitee, Personio and LinkedIn Recruiter. A list of processors handling data outside the EU is offered on request rather than published. Reuse rights over data held in the procurement platform would be governed by the customer terms and the Data Processing Agreement, which is referenced but not accessible.
Data retention & training
Hosting summary
The vendor states on its product pages that customer data is hosted in the EU and safeguarded under GDPR. No hosting country, region beyond the EU, or hosting provider is named, and the Made in Germany claim used on the site refers to the product's origin rather than to where data is stored, so it should not be read as a data residency commitment. The customer terms define the vendor's responsibility as ending at the router output of the Mercanis data centre or that of its subcontractor, which confirms that subcontracted infrastructure is involved without identifying it. A list of processors handling data outside the EU exists but is supplied on request rather than published. The publisher is established in Germany, the customer terms are governed by German law, and the jurisdiction is German. Buyers who need a contractual data residency guarantee, or a named hosting provider and region, will have to obtain both in writing, as neither can be established from the public site.
Things to keep in mind
Risks and trade-offs to weigh before adopting Mercanis.
- The advertised SOC certification is not evidenced: the customer terms describe only an audit guided by SOC 2 principles, with no certificate number, body or report. Ask for the certificate before relying on it.
- The Data Processing Agreement is made contractually applicable by the customer terms, but the URL those terms publish for it serves the homepage instead, so the document cannot be read before signing.
- The privacy policy covers the website, marketing and recruiting only. It does not describe how customer data inside the procurement platform is processed, so GDPR facts drawn from it do not transfer to the product.
- The domain is second-hand: its first web archive capture dates from 2004 and belongs to an unrelated advertising site, while the current registration dates from October 2020. Historical traces of the domain say nothing about this company.
- Performance figures shown on the site (four times faster onboarding, 80% less reconciliation time, €500k+ saved annually) come from customer testimonials and are not independently audited.
- The vendor's own pages disagree on the number of AI agents, announcing 55 on the homepage and 50+ on the dedicated agent page.
- Delegating sourcing comparisons and approval routing to autonomous agents can erode a team's own judgement on supplier selection over time; keep human review on decisions with material commercial or compliance consequences.
Setup & Integrations
Technical difficulty
Setup is a managed enterprise implementation, not a self-service sign-up. There is no way to create an account independently: onboarding runs through the vendor's team after a commercial agreement. The platform can be deployed standalone or integrated with existing ERP and SRM systems, and connecting SAP or NetSuite is the main technical effort. Beyond the technical work, the organisational load matters more: intake forms, approval routing and category structures have to be configured to your policies, and suppliers must be onboarded onto a separate portal. One customer describes the onboarding as smart and quick.
Deployment
Integrations
Supported languages
Behind Mercanis
Fundraising
Social
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
What does Mercanis do?
How much does Mercanis cost?
Is there a free trial or a free plan?
Who is behind Mercanis?
Where is the data hosted?
Is Mercanis SOC 2 certified?
Which systems does Mercanis integrate with?
Does Mercanis offer an API?
Which languages does the interface support?
Is there a mobile app?
Should you pick Mercanis?
Mercanis is a credible enterprise procurement platform rather than a point tool. Its functional scope is genuinely broad, covering intake, sourcing, supplier management, contracts, risk and analytics in one system, and its corporate substance checks out: the legal identity published on the site matches the German commercial register exactly, the customer references are named and verifiable, and the funding history is recent and corroborated by capital increases on the register itself.
The main reservation is commercial opacity. No price, plan or tier is published anywhere, there is no free plan and no trial, and the only way to learn what the product costs is to talk to a salesperson. For a buyer comparing options, that is a real cost in time.
A second reservation concerns claims that the vendor does not fully support. The site advertises SOC certification on its homepage and several product pages, but its own customer terms describe something narrower: being guided by the five principles of SOC 2 and audited accordingly, with no certificate number, certification body or published report. The list of sub-processors is available only on request, the published privacy policy covers the website rather than the platform, and several advertised URLs, including the Data Processing Agreement link printed in the terms themselves, quietly serve the homepage instead.
None of this makes the product unsound. It does mean that the security and compliance posture, which is central to the platform's positioning with regulated European industries, has to be established in the sales process rather than from public information. Buyers should ask for the certificate, the sub-processor list and the Data Processing Agreement in writing, and confirm module scope and user counts before comparing the quotation with alternatives.
- Choosing a selection results in a full page refresh.
- Opens in a new window.