Skip to content
Enjoy complimentary data migration when switching from your existing bookkeeper or CPA to Institution.

Choosing a provider

Test sealed supplier responses before buying sourcing software

Verify who can see bid information, when it becomes visible and how reopening or exporting a negotiation affects confidentiality.

By Institution5 minute readPublished View sources
In this guide

Define confidentiality as a role-and-time rule

A sourcing platform's sealed-response label needs a concrete meaning. Before selecting the product, state which people may see supplier participation, response amounts, attachments and evaluation results at each stage. The buyer's process should define the rule before a vendor demonstrates its settings.

Oracle's negotiation documentation distinguishes open, blind and sealed response visibility with different behavior. That is a product example of why terminology alone is insufficient. Ask the candidate to explain the exact effect of each relevant state and action in the version being proposed.

Create a controlled exercise with fictional suppliers and synthetic prices. Do not use a live competitive process as a sales demonstration. The sample should include a buyer, a collaborator, an evaluator, an administrator and supplier users with the actual intended permissions.

If the procurement is subject to public-sector or other formal requirements, have the appropriate adviser define them separately. A software setting does not determine whether the entire sourcing process meets those requirements. This evaluation tests the approved visibility design and the records the application preserves.

References: Oracle: Negotiation controls and response visibility

Check what is visible before responses are opened

Submit distinct fictional responses from two suppliers and inspect the platform through each role. Test the main response screen, dashboards, notifications and standard reports the role can access. A hidden detail page is insufficient if a summary tile reveals the same protected amount.

Separate knowledge that a response exists from access to its contents. The buyer may need to monitor participation without seeing prices, depending on the intended procedure. Ask the platform to demonstrate those permissions independently where the process requires it.

Inspect attachments and exported documents as well as typed fields. A technical proposal or cover sheet may contain commercial information even when the designated price field is hidden. The company needs to know how document categories and visibility settings interact.

Use only the vendor's authorized demonstration routes, including any API or integration view it offers for evaluation. The objective is to verify the product's permission model, not to probe a supplier's confidential production records. Record the specific role and action behind each observed result.

Make the opening action a controlled event

Ask who may close the response period, unlock responses or otherwise make protected information visible. These may be separate actions. The company should understand which event changes buyer access and which, if any, changes what suppliers can see.

Run the sample through its planned closing time and inspect the state before an authorized opening action. Determine whether the platform opens automatically or waits for an authorized person. Match that behavior to the company's procedure and documented delegation.

If two-person review or another approval is required by the company's process, ask how the application supports it. A policy written outside the system may still be workable, but the vendor should not describe it as an enforced control unless the software actually prevents an unauthorized action.

Retain the opening record showing the event, actor, time and relevant negotiation version. The reviewer should be able to distinguish the planned close time from the actual time responses became accessible. A single completed status can conceal that chronology.

Test revisions, late responses and reopening

Have a fictional supplier revise its response before the deadline. Inspect which version will be evaluated and how the earlier version remains represented in the history. The process should not leave evaluators comparing one supplier's final response with another's superseded draft.

Attempt a late submission through the supported test workflow. Record the result and the authority required for any exception. The company should know whether the platform blocks it, records it separately or permits another defined action.

Reopen or extend the sample negotiation using the intended procedure. Ask whether already submitted responses remain sealed, whether suppliers are notified and whether the original deadline and revision history remain visible. An extension can change participation conditions and should have a traceable decision.

Check a canceled and restarted negotiation. The new round should have a clear relationship to the old one without unintentionally exposing prior protected information. The vendor should explain which settings are copied and which the buyer must review again.

Separate technical evaluation from commercial visibility

If the company wants evaluators to assess technical requirements before seeing price, demonstrate that arrangement with the actual response structure. Assign the technical evaluator role and inspect its access to all fields and attachments, not only the scorecard screen.

Include a response that places a price inside a technical attachment. Ask what the operating process does with that document. Software cannot make a document's contents harmless merely because a supplier uploaded it under the wrong heading; the company needs a defined handling procedure.

Inspect scoring permissions and changes after commercial information becomes available. The process should identify who can revise an evaluation and how the change is recorded. A score altered after opening may require explanation even when the platform technically permits it.

Export the accepted evaluation record. Confirm that it identifies the response version, evaluation criteria, scores and approval where required. A spreadsheet of final totals alone may be insufficient to explain how the award recommendation was reached.

Accept confidentiality with an understandable audit record

Review administrator access explicitly. The company should know which privileged roles can change settings or obtain information outside ordinary buyer views and how those actions are controlled and recorded. Avoid describing the process as inaccessible to everyone if administrative access remains part of its design.

Change the evaluator team during the controlled exercise. Remove one user's access and add a replacement, then inspect the permitted views and change history. Ask how the process handles files the former evaluator already downloaded; removing application access should not be mistaken for retrieving every previously issued copy.

Price the response controls, evaluator roles, reporting and any required two-stage functionality in the same proposal. Ask whether the demonstration depends on an optional module or advanced plan. The contract should cover the process the company actually tested.

Have the internal sourcing owner repeat the sample and explain the resulting history. Accept the platform when response access changes only through the intended roles and events, exceptions are visible and the company can preserve a coherent account of how the negotiation was conducted.

Sources

Requirements and product details can change. Check the linked guidance for the facts that apply to your situation.

Related reading

Need help with this work?

General information, not personalized accounting, tax, legal, or investment advice. Have the appropriate qualified professional review decisions that depend on your circumstances.