Gate 01
Network gate
Before: Restricted access
Verified identity, organisation, role, licences, sanctions screening, and approval history.
Business process map
The map separates what is operational today from partial capabilities and the remaining TRL 8 build-out. Planned stages are part of the target workflow, not claims of completed functionality.
Authorised participants and a controlled sourcing need
Evidence-backed shortlist, RFQ, and approval decision
Contracted, funded, supplier-confirmed, lot-released order
Cleared delivery and accepted or governed receipt
Reconciled record, oversight, and measurable learning
Cross-functional swimlanes
Accountability remains explicit even when a carrier, broker, payment provider, data source, or other external party performs part of the work.
Stage detail
Qualify
Establish who may participate, under which legal entity, role, jurisdiction, and quality scope.
Core work
Entry
A buyer requests access or a supplier registers.
Controlled output
Verified participant record with an auditable approval decision.
Release gate
Only approved organisations and verified users enter restricted workspaces.
Finished TRL 8 capability
Automated sanctions, beneficial-ownership, licence, renewal, and periodic re-verification controls.
Plan
Translate a clinical or operational need into an authorised, measurable sourcing requirement.
Core work
Entry
A verified buyer identifies a product, shortage, or replenishment requirement.
Controlled output
Approved sourcing brief with budget, timing, and decision criteria.
Release gate
The request has an accountable owner, authorised scope, and complete minimum data.
Finished TRL 8 capability
ERP demand signals, approval policies, budget controls, shortage alerts, and reusable sourcing templates.
Source
Find eligible products and suppliers while keeping regulatory, provenance, and commercial evidence together.
Core work
Entry
A sourcing brief is ready for market discovery.
Controlled output
A defensible shortlist of products and supplier listings.
Release gate
Every shortlisted option has traceable source, freshness, and verification status.
Finished TRL 8 capability
Validated supplier feeds, live regulatory refresh, comparison scoring, and configurable sourcing policies.
Source
Turn the shortlist into a controlled, multi-item request with immutable commercial and compliance snapshots.
Core work
Entry
The buyer selects one or more eligible listings.
Controlled output
Submitted RFQ dossier and assigned review task.
Release gate
Required fields, listing integrity, and buyer authority checks pass before submission.
Finished TRL 8 capability
Versioned RFQs, competitive quote rounds, policy-based approvals, and ERP purchase-request synchronisation.
Assure
Test the proposed transaction against product, supplier, buyer, import, quality, and economic requirements.
Core work
Entry
A complete RFQ dossier is submitted.
Controlled output
Approved, rejected, or information-required decision with evidence and audit history.
Release gate
No approval until mandatory evidence and independent review requirements are satisfied.
Finished TRL 8 capability
Rules engine, four-eyes approval, jurisdiction packs, SLA timers, and controlled exception/waiver workflow.
Commit
Convert an approved sourcing decision into signed obligations and a controlled payment commitment.
Core work
Entry
Compliance and commercial approval gates are clear.
Controlled output
Funded, contracted order released to the selected supplier or suppliers.
Release gate
Signed required contracts and verified payment precede fulfillment release.
Finished TRL 8 capability
E-signature, purchase orders, escrow or milestone payments, tax handling, reconciliation, refunds, and supplier payouts.
Fulfill
Confirm capacity, allocate inventory, manufacture or pick the order, and keep readiness evidence current.
Core work
Entry
Contracts and the required financial commitment are recorded.
Controlled output
Supplier-confirmed order with batch identity and a committed ready date.
Release gate
Only verified suppliers with active evidence may confirm fulfillment.
Finished TRL 8 capability
Per-supplier fulfillment workspaces, capacity commitments, batch genealogy, SLA alerts, substitutions, and split awards.
Fulfill
Prove that the actual lot, packaging, labels, documents, and transport plan satisfy the approved transaction.
Core work
Entry
The supplier identifies the shipment lot or batch.
Controlled output
Released shipment with a complete, version-locked pre-shipment dossier.
Release gate
Shipment remains blocked until all mandatory lot and lane evidence is approved.
Finished TRL 8 capability
Lot-specific document upload, digital signatures, expiry rules, release certificates, and deviation/CAPA workflows.
Move
Book, monitor, and clear the approved shipment while preserving chain of custody and condition evidence.
Core work
Entry
Quality release and shipping authorisation are recorded.
Controlled output
Cleared shipment delivered to the authorised receiving location.
Release gate
The booked lane, consignee, insurance, and customs file match the approved dossier.
Finished TRL 8 capability
Carrier, broker, and IoT integrations; ETA events; cold-chain telemetry; exception playbooks; and immutable custody history.
Receive
Confirm what arrived, its condition, and whether quantity, identity, and documentation match the order.
Core work
Entry
The carrier records delivery at the authorised facility.
Controlled output
Accepted receipt or a governed discrepancy case with resolution ownership.
Release gate
Financial and dossier closeout wait for accepted receipt or an approved exception resolution.
Finished TRL 8 capability
Mobile receiving, barcode/UDI capture, photo evidence, quarantine, claims, returns, credits, and ERP goods-receipt integration.
Close
Reconcile the transaction, release final controlled records, and apply the retention schedule.
Core work
Entry
Receipt is accepted and all material exceptions are resolved.
Controlled output
Completed order with a complete audit-ready record package.
Release gate
No closeout while money, documents, delivery, or exceptions remain unreconciled.
Finished TRL 8 capability
Three-way match, credit/refund workflow, supplier settlement, immutable retention, and finance-system export.
Improve
Use operational evidence to manage safety, supplier performance, incidents, data quality, and future sourcing decisions.
Core work
Entry
An order closes or a safety, quality, privacy, or security signal is raised.
Controlled output
Corrective actions, updated risk scores, and improved sourcing policy.
Release gate
Material signals remain owned and time-bound until independently verified closed.
Finished TRL 8 capability
Recall matching, complaint and CAPA modules, supplier scorecards, continuous control monitoring, and regulator-ready reporting.
Control architecture
Gate 01
Before: Restricted access
Verified identity, organisation, role, licences, sanctions screening, and approval history.
Gate 02
Before: Award and deposit
Product pathway, supplier quality, buyer authority, landed economics, independent review, and signed terms.
Gate 03
Before: Carrier handoff
Lot release, labels, shelf life, packing, insurance, export/import documents, and approved lane.
Gate 04
Before: Final record closure
Accepted receipt, resolved deviations, reconciled money, complete dossier, retention policy, and owner sign-off.
Finished-state definition
TRL 8 is not a visual milestone. It means the complete system is qualified in its intended environment, with evidence that product, people, controls, integrations, and recovery procedures work together repeatedly.
Every material handoff is executable in the website, role-scoped, state-controlled, time-bound, and recoverable after failure.
Release evidence: Browser-level buyer, supplier, reviewer, finance, logistics, receiving, and closeout tests pass against staging.
Jurisdiction-specific controls, source freshness, lot evidence, deviations, complaints, and CAPA are governed records rather than free text.
Release evidence: Legal and quality approval, independent process validation, supplier audits, and sampled dossier traceability.
Phishing-resistant privileged authentication, least privilege, tenant isolation, encryption, retention, incident response, and tested recovery.
Release evidence: Independent assessment, penetration test, restore exercise, access review, audit review, and closed high-severity findings.
Monitored service levels, owned queues, escalation rules, reconciliation, support, business continuity, and provider failure playbooks.
Release evidence: Production-like load test, alert drills, RPO/RTO proof, webhook replay, payment reconciliation, and 90 days of controlled beta operations.
Source contracts, lineage, validation, freshness, confidence, change history, and safe interfaces to ERP, carriers, brokers, and payment systems.
Release evidence: Data-quality SLOs, connector monitoring, integration contract tests, lineage sampling, and documented manual fallback.
Ready to work through the process?
Qualified participants receive a role-specific workflow inside the restricted portal.