Question 1

What is Sourceably?

Accepted Answer

Sourceably is a B2B platform for project bidding, supplier management and security compliance. Customers post projects and compare bids from verified suppliers. Suppliers find project opportunities, bid with a structured proposal and show their verified security posture. After the award, budgets, invoices and payments run on the same platform.

Question 2

How does project bidding work?

Accepted Answer

A customer creates a project with its scope, budget, milestones and deadlines, and attaches an NDA. Suppliers sign the NDA, then submit a proposal with a cover letter, documents and a breakdown of resources, rates and hours. The customer compares proposals with a weighted evaluation scorecard, sends them through its approval hierarchy where needed and awards one bid.

Question 3

Who can see the projects I post?

Accepted Answer

You decide for each project: publish it to the whole marketplace, only to the suppliers you select, or keep it unpublished while you prepare. Suppliers sign your NDA before they submit a proposal.

Question 4

How are suppliers verified?

Accepted Answer

Suppliers verify their business identity with country-specific checks, such as company registration and tax numbers, and a live face match against an ID document. Business certificates are either self-attested or submitted for verification by Sourceably approvers, and each one shows its status, so customers know what has been checked.

Question 5

How do suppliers find new projects?

Accepted Answer

Open projects are listed in the project marketplace, where suppliers search and filter them by budget and team size and see which deadlines are closing. Customers can also invite suppliers directly. Suppliers track every bid and its status, and see their win rate and revenue on their dashboard.

Question 6

Can we bring our existing suppliers?

Accepted Answer

Yes. Invite suppliers by email or upload a list from a spreadsheet, keep favourites in your vendor list and invite them to the projects you publish.

Question 7

How do invoicing and payments work?

Accepted Answer

After the award, the supplier records charges against the approved budget and submits invoices with supporting documents. Your approvers review them according to their budget authority. Approved invoices can be paid by card through Stripe, or you record a bank transfer made outside the platform.

Question 8

Which frameworks are covered?

Accepted Answer

ISO 27001, SOC 2, GDPR, HIPAA, CCPA, PIPEDA and the NY Privacy Act, each with step-by-step guidance. Starter unlocks one framework, Core three, and Enterprise all of them.

Question 9

Which compliance framework do I need: SOC 2 or ISO 27001?

Accepted Answer

Start with the framework your biggest customer asks for. SOC 2 is most common with US customers and SaaS companies, while ISO 27001 is the international standard many European and Asian customers expect. The two overlap a great deal, so much of the work you do for one carries over to the other.

Question 10

Does any of our data leave our servers?

Accepted Answer

No. The agent runs inside your network and reduces everything to counts and pass/fail verdicts before sending. Its payload format has no field for a name, row or identifier, and our server rejects any run that looks like it contains personal data.

Question 11

Does Sourceably perform the SOC 2 or ISO 27001 audit?

Accepted Answer

No. A SOC 2 attestation must be issued by an independent licensed CPA firm, and ISO 27001 certification by an accredited certification body. Sourceably gets you ready, keeps your evidence current, and can connect you with auditor support.

Question 12

Do customers and suppliers need the same plan?

Accepted Answer

No. A supplier might only use Cybersecurity & Compliance to share a scorecard, while a customer uses Projects & Bids to run RFPs and request that scorecard.

Ferramentas gratuitas para clientes e fornecedores

Gerador de RFP, RFQ e RFI

Autoavaliação de prontidão em segurança

Kit de respostas para questionários de segurança

Criador de questionários de segurança para fornecedores

Comparador de cotações

Scorecard de avaliação de fornecedores

Calculadora de custo de SOC 2 e ISO 27001

Localizador de frameworks de conformidade

Gerador de capability statement

Por que estas ferramentas são gratuitas