Security and data protection

Clear statements about how your procurement data is handled.

Procurement data is commercially sensitive: pricing, contractual positions, supplier dependencies and spend. This page sets out how Nita handles the information you supply, and states plainly which assurances exist today and which do not.

See Nita on your data

The principles we operate to

Customer information remains customer information: The contracts, supplier records and spend data you supply remain yours. They are not treated as our material, and they are not repurposed beyond the engagement they were provided for.
Data is supplied for an agreed purpose: Information is provided for a specific, agreed analytical purpose — a pilot, an assessment or an ongoing engagement — and that purpose is recorded as part of the engagement rather than left open-ended.
Access is controlled: Access to supplied procurement data is limited to what is required to deliver the agreed analysis, and access arrangements are confirmed with you as part of the engagement.
Source material remains traceable: Findings link back to the source they were derived from, so that a statement about a contract or a spend figure can be checked against the document or extract it came from.
Outputs support human review: Analysis is produced for a procurement professional to review and act on. Nita does not take commercial decisions, does not contact your suppliers and does not act autonomously on findings.
Use an agreed secure transfer method: Confidential procurement information should be transferred using a method agreed in advance rather than sent ad hoc. Where a customer has a preferred secure transfer arrangement, we work to it.

What we do not claim

Nita does not hold SOC 2 attestation or ISO 27001 certification, and does not claim any security certification that has not been achieved. Where a certification is a requirement for your organisation, it should be treated as absent today rather than pending.

We also make no claim of live integration into customer systems. Nita does not connect directly to ERP, CLM, SRM, finance or procurement platforms, which means it requires no credentials for those systems and no access to your live environments.

No SOC 2 attestation
No ISO 27001 certification
No direct access to customer systems
No credentials required for your ERP, CLM or finance platform

Practical steps you can take

Because Nita works from exports rather than live connections, you retain a substantial amount of control over exposure. The scope of an engagement is defined by what you choose to supply.

Start with a limited dataset — one category or supplier group
Redact or exclude fields that are not needed for the analysis
Agree the transfer method before sending any material
Confirm the purpose, retention and access arrangements in writing
Review findings against source material before acting on them

Data protection and how to reach us

Our processing of personal information is described in the privacy notice, and cookie use on this website is described in the cookie notice. Nita is a trading name of Speed Value Partners Limited, registered in England and Wales under company number 17100988.

Security questions, data protection questions and requests relating to information you have supplied can be sent to Leighton Speed at leighton@nitaai.co.uk.

Security questions we are asked

Is Nita SOC 2 or ISO 27001 certified?

No. Nita does not hold SOC 2 attestation or ISO 27001 certification and does not claim either. If your organisation requires a formal certification before commercially sensitive data can be shared, that requirement is not currently met and should be factored into any decision about a pilot.

Does Nita need access to our procurement systems?

No. Nita works from exports you produce, so no system credentials, network access or integration is required. This keeps the scope of any engagement limited to the specific files you choose to supply rather than to whatever a system connection would expose.

How should we transfer confidential contracts?

By a method agreed in advance. Many procurement teams have an existing secure transfer arrangement, and we work to it. Where none exists, the transfer method is agreed as part of setting up the engagement before any material is sent.

Who reviews the output of the analysis?

Your team. Findings are prepared for human review and are traceable to the source material, so a procurement professional can verify the basis of a recommendation. Nita does not act on findings, does not contact suppliers and does not make commercial decisions.

Continue reading

Ask us the questions your security team would ask.

We would rather set out clearly what does and does not exist today than have a pilot stall over an assurance we cannot give.

See Nita on your data See how the process works

Nita supports commercial procurement review. It does not provide legal advice, and procurement professionals make the final decisions.