Soource
Soource is an Italian AI platform that automates B2B purchasing work: supplier scouting, qualification, RFI/RFQ, follow-ups and document checks, all resting on a single, continuously updated supplier database, with buyers keeping every decision, threshold and approval.
What is Soource?
Soource is an AI platform for procurement automation, aimed at purchasing departments that already have rules, policies and workflows but still execute them by hand. The starting observation is a familiar one: requests for quotation, supplier questionnaires, certificate chasing and approval chains all exist on paper, yet the daily work happens across email, spreadsheets, documents, the ERP and whatever purchasing platform is in place. Soource describes itself as a network of AI agents that take over that operational work, while buyers and managers keep the decisions and the approvals.
The platform rests on three layers. First, the customer's internal data: suppliers, spend, contracts, purchasing history, documents and master data. Second, verified external data: certifications, financial reports, ownership structures, country risk, external events and market signals. Third, the agentic workflows that act on both.
Four manual tasks are named as targets: sending an RFI or RFQ to at least five suppliers, qualifying suppliers through questionnaires, checking documents such as certifications, ESG records, cyber questionnaires, financial reports and administrative paperwork, and running approval workflows. Around them sit the product modules — Studio, which builds workflows from blocks rather than code, Intelligence for continuous supplier monitoring, DataLab for refreshing any supplier data point on demand, plus Discovery, PDF Extractor, Agents, Assistant, Suppliers, Questionnaires, RFX, Data Hub and an Export Tool.
Two limits are claimed rather than hidden. Soource says it does not replace ERPs or purchasing platforms, and integrates with them where needed. And suppliers are never asked to learn a portal: the agents reach them through the channels they already use, email first.
The company reports more than 50 customer companies and a four-to-eight-week path from the opening workshop to the first workflow in production. One published case, a multinational food group, describes 45 suppliers contacted, 71 automatic follow-ups and 19 responses analysed by AI, for 40 minutes of buyer time instead of three and a half to four days, with up to EUR 94,500 saved over three months and a 1.4% saving on the first quotation — accompanied by an explicit caveat that results vary. The publisher is Soource Srl, based at the NOI Techpark in Bolzano, and the product interface exists in English, Italian, Spanish, German and French.
What it does
- Build and maintain a single supplier database from internal records, information collected from the suppliers themselves and verified external sources.
- Scout new suppliers and open contact with them against criteria such as sector, region, revenue, certifications and technical requirements.
- Qualify suppliers: send questionnaires, read and analyse the answers, and check certifications and supporting documents.
- Run RFIs and RFQs end to end — dispatch to the selected suppliers, chase the non-respondents, then collect and compare the offers in a structured form.
- Monitor the supplier base continuously and surface risks, opportunities and actions worth reviewing.
- Refresh any supplier data point on demand, whether it is a new field or a historical one.
- Assemble workflows from blocks — triggers, agents, actions and human checks — without writing code.
When to use Soource / When not to
A quick filter to help you decide if Soource is the right fit.
When to use Soource
- Procurement and sourcing departments in mid-market and enterprise companies whose processes, policies and approval rules already exist but are still executed by hand across email, spreadsheets and documents.
- Category managers and strategic sourcing managers who run RFIs and RFQs to five or more suppliers on a recurring basis and spend their time chasing non-respondents.
- Supplier quality, vendor risk and third-party compliance teams that must verify certifications, ESG documents, cyber questionnaires and financial reports supplier by supplier.
- Organisations with large, multi-country supplier bases whose records are scattered between an ERP, a purchasing platform, spreadsheets and mailboxes, and who want to automate without replacing any of them.
- Buyers in the compliance-heavy sectors the vendor addresses — pharmaceuticals, utilities, retail, construction, food and beverage, manufacturing, energy and insurance — where control and traceability are contractual obligations.
When not to use Soource
- Anyone looking for a self-service tool: there is no sign-up, no published plan and no trial, and the only way in is a discovery workshop requested through a form.
- Small businesses and occasional purchasers: the positioning, the case studies and the figures all assume supplier bases of several hundred vendors.
- Teams that need results within days: four to eight weeks separate the first workshop from the first workflow running in production, and the setup is done with a deployment team rather than alone.
- Developers who want to build on top of a documented public API, or to embed procurement automation in their own product: no API offering and no API documentation is published.
- Mobile-first users and English-only organisations outside the vendor's core market: there is no iOS or Android application, and the public site exists in English and Italian only.
How to use Soource
A typical end-to-end flow, from setup to results.
- Request a discovery workshop through the form on the demo page, giving first and last name, company, business email, business phone, the number of active suppliers and where those suppliers are located.
- Expect a reply from a person on the team rather than an autoresponder; the workshop runs about 60 minutes and is presented as carrying no commitment.
- Weeks 1-2, Design: a mapping workshop covers your processes, systems, roles, rules and approval levels, identifies the manual steps and selects the first workflows to automate.
- Weeks 3-4, Data foundation: internal supplier data is cleaned, enriched and brought up to date so the agents work on a reliable base rather than on stale records.
- Weeks 5-8, Activation: agents and controls are configured on the priority workflows, with approvals, thresholds and decisions left exactly where your organisation defined them.
- Go live: the first workflow reaches production between four and eight weeks after the opening workshop.
- Ongoing: teams are trained, adoption is tracked, performance is analysed, agents are tuned and new workflows are added at regular reviews.
- Day to day, work in the web application at app.soource.com, signing in with the credentials issued to your organisation.
- Build or adjust workflows yourself in Soource Studio by combining triggers, agents, actions and human checks as blocks, without writing code.
- On the supplier side, ask nothing: suppliers create no account and learn no portal, since exchanges reach them through their usual channels, email first.
Pros & Cons
Pros
- Covers the whole chain — scouting, qualification, RFQ, follow-ups, response analysis and master data refresh — rather than a single link of it.
- Does not replace the ERP or the purchasing platform already in place: it is designed to sit alongside them and integrate where needed.
- No friction on the supplier side: no account to create, no portal to learn, exchanges through the channels suppliers already use, email first.
- Human control is preserved by design — approvals, thresholds and decisions stay exactly where the customer defined them.
- Data is stated to be hosted and processed exclusively within the European Union, with GDPR compliance claimed explicitly on the homepage and the demo page.
- Workflows are assembled from blocks rather than code, deployment is guided end to end (workshop, data clean-up, configuration, training, reviews), and the product interface exists in five languages: English, Italian, Spanish, German and French.
- The publisher is funded — more than EUR 5M raised from Italian and European institutional investors — and unusually transparent about the public grants it has received, which it lists year by year on its About page.
Cons
- No public pricing whatsoever: no pricing page, no amount, no plan and no announced free trial, so no budget can be framed without a sales conversation.
- No terms of service are published, and the website privacy policy explicitly excludes the Platform from its scope, leaving the product-level policy unpublished; the site carries no robots.txt, sitemap.xml or llms.txt either.
- No subprocessor is named: only categories of recipients are listed, and the nominative list is available on request only.
- No security certification of the publisher — ISO 27001, SOC 2 or equivalent — is claimed or published anywhere.
- Nothing on the site states whether customer data is used to train AI models, nor whether any opt-out exists.
- No documented public API and no mobile application; and four to eight weeks pass before the first workflow runs in production, so there is no immediate autonomy.
- The public site exists in English and Italian only, the supplier base and case material are strongly Italian in flavour, the company is young (registered in January 2024, between 12 and 21 staff depending on the source), and its own About page contradicts itself on the founding year.
Pricing & Plans
No pricing is published. There is no pricing page, no plan, no rate card and no product price anywhere on the site, and the commercial model is contact-based: the entry point is a 60-minute discovery workshop requested through a form. Neither a free plan nor a free trial is announced, and neither is explicitly ruled out either. The euro amounts shown on the homepage are customer savings, not prices: figures such as EUR 19-31k of savings per month or up to EUR 94,500 saved in three months describe reported outcomes, and the company adds that results may vary depending on category, volumes, price history, technical requirements and market conditions. No per-user, per-site, per-request or credit-based billing regime is mentioned.
Data, GDPR & hosting
A consolidated view of how Soource handles your data.
GDPR overview
GDPR compliance is claimed explicitly, not certified. The homepage security section reads GDPR compliant — Data processed in Europe, with granular roles and permissions, and the demo page repeats that data is processed in Europe in compliance with the GDPR, with no sharing with third parties. The B2B database notice is drafted under Articles 13 and 14 and includes a summarised legitimate interest assessment. The controller is Soource S.r.l., Via A. Volta 13/A, NOI Techpark, 39100 Bolzano, Italy, VAT 03237710219, reachable at privacy@soource.com. Access, rectification, erasure, restriction and objection rights are set out, with unconditional objection to commercial use by customers, and the Italian Garante is named as supervisory authority. Article 32 measures listed are encryption, periodic backups, multi-factor authentication and access limited to authorised trained staff. No DPO and no Article 27 representative are named; the publisher is EU-established.
Who owns the data?
Soource states on its homepage that your data stays yours, inside your perimeter, but no published contract confirms it: the website privacy policy explicitly excludes the Soource Platform, which is governed by a separate policy and by specific terms of service, neither of which is public. For the website itself, Soource S.r.l. acts as data controller, with IT and hosting suppliers appointed as Article 28 processors. In the B2B supplier database, Soource is the controller, while the customer companies that access those records act as independent controllers, contractually limited to B2B procurement, scouting and quotation purposes. Records those customers then import into their own systems fall under their own policies.
Reuse rights
On the website, browsing data — IP address, URL, timestamp, response code — is used for usage statistics and to monitor that the site is working, on the legal bases of the access contract and legitimate interest; profiling trackers require consent. Contact form entries and demo requests, the latter handled through a third-party scheduling service, are used to reply. The B2B supplier database is the substantive case: business contact details — name, surname, business email, business phone, role, department, company and LinkedIn profile — are made available to Soource customers for sourcing, RFI and RFQ purposes, on the legal basis of legitimate interest under Article 6(1)(f), with a documented balancing test summarised in the notice. Customers are contractually barred from using those records for mass marketing, and Soource states that the data are not transferred or sold to third parties for their own commercial purposes. No special-category data under Article 9 is collected, and anything supplied spontaneously is deleted. No profiling and no automated decision-making within the meaning of Articles 22 and 4(4) is carried out. The sources are public ones — company websites, LinkedIn, business registers, chambers of commerce — together with third-party partner databases and enrichment tools, with the Article 14(5)(b) exemption invoked for informing the people concerned. What no document addresses anywhere is whether customer data may be reused to train AI models.
Data retention & training
Hosting summary
Hosting is described by region, never by country. The B2B database notice states that all data are stored and processed exclusively on infrastructure located within the European Union, with no transfer to third countries outside the European Economic Area. The homepage says more loosely that data is processed in Europe, with granular roles and permissions, and the demo page repeats that data is processed in Europe in compliance with the GDPR, with no sharing with third parties. No hosting country and no hosting provider is named anywhere on the site; IT and hosting suppliers are described only as Article 28 processors, without names. Observed outside the site: the application is served behind AWS CloudFront and its backend runs on an AWS API Gateway in the eu-west-1 region in Ireland, while the marketing site itself is hosted on Lovable behind Cloudflare — brochure infrastructure, not platform infrastructure. Declared safeguards are encryption, periodic backups, multi-factor authentication and access restricted to authorised staff. A buyer with a data residency requirement should ask for the hosting country and the subprocessor list in writing, since neither is published.
Things to keep in mind
Risks and trade-offs to weigh before adopting Soource.
- The publisher contradicts itself on its own founding year: the statistics block on the About page reads 2024 as the year Soource was founded, while the mission paragraph on the same page says Soource was born in 2023, and its LinkedIn page shows 2023. The company registration date used here, 19 January 2024, comes from the Italian business register, a source outside the site. Headcount is contradictory too, from 4 to 21 depending on the source, and the site's own REA number does not match the one held by the register.
- The domain is second-hand: the first Internet Archive capture dates from 5 June 2008, the domain was registered on 14 April 2019, and the company was incorporated in January 2024. The archive date says nothing about the age of the product, and reading it as a sign of longevity would be a mistake.
- The homepage structured data declares a software offer priced at 0 EUR while no price and no free offer exists anywhere on the site. It is a template placeholder, and taking it at face value would be misleading. Every euro amount on the homepage is a reported customer saving, never a price, and the company itself warns that results vary with category, volumes, price history, technical requirements and market conditions.
- No terms of service are public, so no contractual fact can be checked before the sales conversation. The website privacy policy openly leaves the Platform outside its scope, no subprocessor list is published, and the B2B notice still reads Version: January 2024 although the product has moved on since.
- The commitment to keep data inside the EU with no transfer outside the EEA is worded in the B2B database notice; for the Platform itself the site says only that data is processed in Europe. Note also that the marketing site and the application run on two different infrastructures, and only the second is covered by the product commitments.
- The certification vocabulary on the site — ISO, ESG, cyber — describes documents the tool checks at suppliers, not certifications held by the publisher. And the promise that your data stays yours, inside your perimeter, speaks to ownership and perimeter, not to model training, a subject the site never raises.
- The human risk sits in the delegation itself. When agents send the questionnaires, chase the non-respondents and summarise the answers, a buyer can stop reading the underlying documents and start approving summaries — which is precisely how supplier judgement erodes. The published case compresses days of work into 40 minutes; the saved hours are only a gain if some of them go back into checking what the agents decided, and into keeping thresholds and approval levels deliberately tight.
Setup & Integrations
Technical difficulty
Technically undemanding, organisationally substantial. There is nothing to install: the product is a web application, with no API key, no connector and no development work on the customer side, and nothing at all for suppliers to set up. But it is not a self-serve tool. Deployment is guided and takes four to eight weeks, running from Design to Data foundation to Activation, and the real effort is internal: mapping processes, rules, thresholds and approval levels, then cleaning and enriching supplier data. Soource configures the agents; workflows are then built from blocks in Studio, without code.
Deployment
Supported languages
Behind Soource
Fundraising
Social
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
Does Soource replace my ERP or my purchasing platform?
How is this different from a procurement orchestrator?
Which procurement processes can actually be automated?
What does Soource mean by reliable supplier data?
Do I have to configure everything myself?
Do my suppliers need to log into a portal?
Is there a published price?
Where is the data hosted?
How long before the first workflow goes live?
Is there a mobile app?
Should you pick Soource?
Soource is a deliberately narrow tool, and better for it. It is not a general-purpose assistant: it addresses structured B2B purchasing, and the whole chain rather than a single link — scouting, qualification, RFI/RFQ, follow-ups, response analysis and master data refresh. Its distinguishing claim is the supplier data layer underneath the agents: orchestrating flows between tools is worth little when the underlying records are stale.
The adoption model cuts both ways. A guided rollout — process mapping, data clean-up, agent configuration, training and regular reviews across four to eight weeks — is a plausible success factor for an organisation with a large, messy supplier base. It is also a real barrier to entry: there is no self-service path, no published price and no trial, and the only way in is a 60-minute discovery workshop requested by form.
Commercial and contractual opacity is the main reservation. No pricing page, no terms of service, and a website privacy policy that openly leaves the Platform outside its scope. No subprocessor list is published, no security certification is claimed, and nothing anywhere addresses whether customer data is used to train models. A prospective buyer will have to get all of that in writing.
Against that, the European posture is stated plainly — processing on infrastructure inside the European Union, no transfer outside the EEA in the B2B notice, GDPR compliance claimed on the homepage — a strong argument for a European buyer. The publisher is young, registered in Bolzano in January 2024, but funded, with more than EUR 5M raised and coverage in Italian and European business media.
Read the published savings figures as cases, not guarantees: the company itself says results vary with category, volumes, price history, technical requirements and market conditions. The workshop is where those numbers should be tested.
- Choosing a selection results in a full page refresh.
- Opens in a new window.