Riff
Riff deploys AI agents that run the operational work behind every order — procurement, planning, logistics and order fulfilment — directly on top of an existing ERP, escalating only the cases that genuinely need a human decision.
What is Riff?
Riff is an enterprise platform of AI agents that take on the operational work surrounding every order, from quoting and procurement through planning to the final invoice. It is sold to manufacturers and industrial groups on a single premise: absorb more volume and complexity without growing the team at the same pace.
The product is a catalogue of sixteen job-ready agents in four families — nine in procurement, three in logistics, two in planning and two in order fulfilment. Each is documented individually and carries a target KPI. The order confirmation agent claims 25 to 40 points of additional touchless confirmation rate, the three-way matching agent 60 to 80 points of touchless invoice rate, and the overcharge agents 30 to 50 points of recovery rate. Riff states that agents can remove up to 80% of the manual work.
What sets the approach apart, in the vendor's own framing, is that agents do not write free text onto live orders. They read real ERP data and act through deterministic, controlled tools, so the same input produces the same result on every run. The model is asked to weigh only the genuinely ambiguous calls, and stops to ask when it is unsure. Every agent runs inside guardrails the customer defines — what it may touch, what it must verify, where it must escalate — and each action is presented as traceable and reversible.
Riff installs on top of existing systems rather than replacing them, connecting to Infor LN, M3 and CloudSuite, Microsoft Dynamics 365, IFS Cloud and SAP S/4HANA, plus the company mailbox and EDI feeds. A working agent needs read and write access to the ERP, inbound and outbound email, and supplier and contract data. Customers named on the site include Glamox, Aker Qrill, ENRX, Mesta and Melbye, and Glamox is reported to have gone from kickoff to production in eleven days.
One point matters for anyone arriving from an old link: databutton.com now redirects to riff.ai. The former Databutton AI app builder has given way to Riff, although the legal entity remains Databutton AS, based in Oslo.
What it does
- Chase suppliers for overdue order confirmations and validate every reply against the governing contract
- Match incoming invoices to the purchase order and goods receipt, code them to the right GL account and post them to the ERP
- Catch contract overcharges, rebate errors and freight billing errors, then run the dispute until the credit note lands
- Negotiate supplier price-increase requests within a defined procurement authority
- Turn MRP-planned orders and requisitions into consolidated, correctly timed purchase orders
- Book, track and plan freight while keeping ERP records and emissions data current
- Detect and correct master data gaps across ERP, logistics and manufacturing records
When to use Riff / When not to
A quick filter to help you decide if Riff is the right fit.
When to use Riff
- Buyers and procurement teams in multi-site manufacturers: Glamox moved fifty of them off order chasing and onto margin work
- Supply and demand planners dealing with MRP exceptions, production scheduling and S&OP
- Logistics and transport teams booking freight, tracking shipments and keeping emissions data current
- Accounts payable and financial control teams running three-way matching and GL coding at volume
- IT and enterprise architecture leaders who want governed AI agents without replacing the ERP
When not to use Riff
- Individuals, freelancers and small teams: the offer is enterprise-only and starts with a sales demo
- Companies with no ERP, since every agent needs read and write access to one
- Buyers who want to compare prices before speaking to anyone, as no tariff is published and there is no self-serve signup
- Teams looking for a general-purpose writing or coding copilot, since Riff executes ERP work rather than drafting
- Former users of the Databutton AI app builder, which is no longer offered at this address
How to use Riff
A typical end-to-end flow, from setup to results.
- Fill in the contact form at riff.ai/contact, which asks for name, phone, company email, job title, company size, the ERP in use and how you heard about Riff
- Submit the form through its Request a demo button to get a sales conversation and an estimate of the impact on your operations
- Browse the catalogue at riff.ai/agents and pick a first agent, filtering by procurement, planning, order fulfilment or logistics
- Open the access each agent requires: read and write to the ERP, an inbound and outbound mailbox, and supplier and contract data
- Define the guardrails with your team: what the agent may touch, what it must verify, and the thresholds at which it escalates
- Run the first agent on live orders, which Riff says takes weeks rather than quarters
- Handle only the cases the agents escalate, through the Requests, Inbox and Completed queue
- Improve the agents and build new ones with your own people as the scope widens
- Sign in to the working environment at riff.new/home
Pros & Cons
Pros
- Each agent is documented separately with a quantified target KPI, which is unusually precise for this category
- Runs on top of the existing ERP with no system replacement required
- Fast time to production is claimed and evidenced: weeks in general, eleven days at Glamox
- An explicit engineering stance against hallucination, with deterministic tools and escalation when unsure
- Guardrails and scope are set by the customer, and actions are described as traceable and reversible
- Data announced as kept 100% in the EU, with SOC 2 and ISO 27001:2022 claimed and a public trust centre
- Named industrial customers and published, quantified case studies
Cons
- No public pricing at all: the pricing page returns a 404 and every path leads to a sales demo
- No free trial and no free plan, so the product cannot be evaluated without a commercial conversation
- Restricted to organisations that run an ERP and can grant write access to it
- The Terms of Service date from June 2024 and still describe the old Databutton app builder, not the current offer
- The Vanta trust centre is entirely JavaScript-rendered, so the certifications cannot be checked without a browser
- No named subprocessors, no published DPA and no documented opt-out from model training
- No public API documentation, no mobile app, and an English-only site
Pricing & Plans
There is no free plan and no free trial. Riff publishes no price whatsoever: the pricing page returns a 404 and none of the product, customer or agent pages quotes a figure. The only route to a quotation is the demo request form. The Terms of Service confirm a renewable paid subscription billed in US dollars, of a duration chosen by the customer, with card payment handled through Stripe.
Data, GDPR & hosting
A consolidated view of how Riff handles your data.
GDPR overview
Riff states on its homepage and in its FAQ that it is fully GDPR compliant, with data kept 100% in the EU and every agent action traceable and reversible; SOC 2, ISO 27001:2022 and GDPR badges appear alongside. The privacy notice was refreshed on 10 August 2026 and names a data protection officer, martin@databutton.io, with privacy and CCPA enquiries routed to security@databutton.io. It declares no international transfers and no Article 27 representative, which is consistent for a Norwegian company since Norway sits inside the EEA. Access requests are always granted and an appeal route exists; CCPA, CPRA and Virginia's VCDPA are covered too. What is missing is concrete: no published DPA, no named subprocessors, and no documented way to keep data out of model training.
Who owns the data?
The published Terms of Service are issued by Databutton AS (organisation number 927 269 252), governed by Norwegian law with Oslo as the forum and disputes settled through litigation. Users may post their own content, and nothing in the terms transfers ownership of customer data to the vendor. Liability is capped at the amount the customer has paid and limited to a six-month window. The privacy notice lists the personal data collected — email addresses, names and job titles, alongside log, device and location data — and classifies any data provided by the user as sensitive. One caveat matters: these terms date from June 2024 and still describe the former Databutton product rather than today's agent platform.
Reuse rights
Riff names no individual subprocessors. Third parties are declared by category only — data analytics services, payment processors, account registration and authentication services, and performance monitoring tools — with a contractual data-protection commitment imposed on each. Stripe is named as the payment processor, and OpenAI, Anthropic and Google Cloud AI are named as the AI providers behind the product's AI features. The declared CCPA posture is disclose only, so no sale of personal data. Sharing with affiliates is permitted; sharing with business partners and non-affiliated third parties is not. The only opt-out documented anywhere is the unsubscribe link on marketing email, and no mechanism is described for a customer to reuse or export their data without asking.
Data retention & training
Hosting summary
The Terms of Service name Belgium as the website hosting country, and the homepage and FAQ both state that data is kept 100% in the EU. The privacy notice declares no international transfers. The vendor, Databutton AS, is established in Norway, which places it inside the EEA, and the terms designate Norwegian law with Oslo as the forum. A Vanta trust centre at trust.riff.ai advertises live monitoring for ISO 27001, SOC 2 Type II and GDPR, but the page is fully JavaScript-rendered and could not be read, so neither the certificates nor a subprocessor list could be confirmed. Third parties are disclosed by category only; Stripe is named for payments and OpenAI, Anthropic and Google Cloud AI for the AI features. One technical caveat: the site resolves to a CloudFront edge node geolocated in Switzerland, which is a CDN point of presence and says nothing about where customer data actually lives.
Things to keep in mind
Risks and trade-offs to weigh before adopting Riff.
- Agents hold write access to the ERP, so a badly calibrated rule propagates straight into real orders and supplier commitments
- Delegating supplier negotiation to an agent, which Riff explicitly offers, can cost you the relationship and the commercial judgement behind it
- Internal skill erosion: if buyers only ever see escalated exceptions, the team's grip on the ordinary case fades
- The claim that agents do not make mistakes on live orders is strong, unverifiable from outside, and should be tested in a bounded pilot
- SOC 2 and ISO 27001 are announced as alignment rather than certification, and the trust centre cannot be read without a browser
- No documented way to keep your data out of model training, while the privacy notice names OpenAI, Anthropic and Google Cloud AI as providers
- Operational dependency: once agents become the default path for order processing, reverting to manual work is a project in itself
Setup & Integrations
Technical difficulty
Moderate to high, and never self-serve. There is no signup: everything starts with a sales demo. Each agent then needs read and write access to the ERP, an inbound and outbound mailbox, and supplier and contract data, which means IT involvement for access and governance. Your team also configures the guardrails. Riff counters that no system replacement is required and that a first agent runs on live orders within weeks, with Glamox cited at eleven days from kickoff to production.
Deployment
Integrations
Behind Riff
Fundraising
Social
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
What does Riff actually do?
Will the agents make mistakes on real orders?
How is this different from the AI copilots we already see?
Do we have to change our ERP?
Who stays in control of what the agents do?
Where is our data hosted and is it secure?
How much does Riff cost?
Is there a free trial?
Which agents are available?
What is the connection with Databutton?
Should you pick Riff?
Riff is one of the more sharply positioned AI products in the enterprise market. It does not sell a general assistant: it sells sixteen named agents that each own a specific piece of the work around a purchase or sales order, and it attaches a quantified KPI to every one of them. The engineering argument is equally deliberate. Where most tools draft and suggest, Riff insists on deterministic tools acting on real ERP data, with the model confined to genuinely ambiguous calls and guardrails set by the customer. For procurement, planning and logistics teams drowning in confirmation chasing and invoice matching, that is a credible and specific promise, and it is backed by named industrial customers and published figures.
The reservations are just as concrete. Pricing is entirely opaque: there is no tariff page at all, no free plan and no free trial, so nothing can be evaluated or budgeted without entering a sales cycle. The legal documentation has not kept pace with the product, since the Terms of Service still date from June 2024 and describe the previous Databutton app builder. Security claims are stated as alignment with SOC 2 and ISO 27001 rather than certification, and the trust centre that would settle the question does not render without a browser. No subprocessor list, no published DPA and no training opt-out are available.
Finally, the practical bar is high. Agents need read and write access to a live ERP, which makes this an integration project with real governance implications, whatever the no-rip-and-replace framing suggests. Riff is worth a serious look for mid-size and large manufacturers with an ERP already in place, and of no use to anyone else.
- Choosing a selection results in a full page refresh.
- Opens in a new window.