Haven

Haven operating model · TRL 8 target

One governed path from need to verified receipt.

Haven is designed as an evidence-led operating system for institutional medical procurement—not a simple catalogue. The complete process connects every participant, decision, document, payment, shipment, exception, and audit event from qualification through post-market oversight.

12

operating stages

6

accountable lanes

4

release gates

1

traceable record

Business process map

Five connected phases. No invisible handoffs.

The map separates what is operational today from partial capabilities and the remaining TRL 8 build-out. Planned stages are part of the target workflow, not claims of completed functionality.

Operational nowPartially operationalTRL 8 build-out
  1. 01–02

    Qualify and plan

    PHASE 01

    Authorised participants and a controlled sourcing need

  2. 03–05

    Source and assure

    PHASE 02

    Evidence-backed shortlist, RFQ, and approval decision

  3. 06–08

    Commit and fulfill

    PHASE 03

    Contracted, funded, supplier-confirmed, lot-released order

  4. 09–10

    Move and receive

    PHASE 04

    Cleared delivery and accepted or governed receipt

  5. 11–12

    Close and improve

    PHASE 05

    Reconciled record, oversight, and measurable learning

Cross-functional swimlanes

Every stage has an owner and a controlled handoff.

Accountability remains explicit even when a carrier, broker, payment provider, data source, or other external party performs part of the work.

Buyer organisation
Qualify and planAuthorise need
Source and assureSelect and submit
Commit and fulfillApprove terms and funds
Move and receiveReceive and inspect
Close and improveReport outcomes
Supplier
Qualify and planQualify organisation
Source and assurePublish verified offer
Commit and fulfillConfirm and fulfill
Move and receiveRelease lot evidence
Close and improveResolve exceptions
Haven operations
Qualify and planOrchestrate access
Source and assureStructure sourcing
Commit and fulfillCoordinate award
Move and receiveControl handoffs
Close and improveClose the record
Compliance and quality
Qualify and planDefine controls
Source and assureReview evidence
Commit and fulfillApprove transaction
Move and receiveRelease shipment
Close and improveMonitor safety and CAPA
Finance and logistics
Qualify and planApprove budget
Source and assureValidate economics
Commit and fulfillControl payment
Move and receiveMove and clear
Close and improveReconcile and settle
Data, security, and audit
Qualify and planVerify identity
Source and assureTrack provenance
Commit and fulfillLog decisions
Move and receiveMonitor events
Close and improveRetain and report

Stage detail

The full operating process, including the work still ahead.

  1. 01

    Qualify

    Buyer and supplier qualification

    Operational now

    Establish who may participate, under which legal entity, role, jurisdiction, and quality scope.

    Accountable owner
    Haven operations
    Collaborators
    Buyer · Supplier · Compliance

    Core work

    • Identity and organisation review
    • Role and jurisdiction screening
    • Supplier GMP and licence review
    • Access approval and account provisioning

    Entry

    A buyer requests access or a supplier registers.

    Controlled output

    Verified participant record with an auditable approval decision.

    Release gate

    Only approved organisations and verified users enter restricted workspaces.

    Finished TRL 8 capability

    Automated sanctions, beneficial-ownership, licence, renewal, and periodic re-verification controls.

  2. 02

    Plan

    Demand planning and requirement definition

    Partially operational

    Translate a clinical or operational need into an authorised, measurable sourcing requirement.

    Accountable owner
    Buyer organisation
    Collaborators
    Clinical stakeholder · Finance · Haven

    Core work

    • Define intended use and specifications
    • Confirm quantity, destination, and urgency
    • Assign budget and internal owner
    • Record alternatives and constraints

    Entry

    A verified buyer identifies a product, shortage, or replenishment requirement.

    Controlled output

    Approved sourcing brief with budget, timing, and decision criteria.

    Release gate

    The request has an accountable owner, authorised scope, and complete minimum data.

    Finished TRL 8 capability

    ERP demand signals, approval policies, budget controls, shortage alerts, and reusable sourcing templates.

  3. 03

    Source

    Market discovery and evidence comparison

    Operational now

    Find eligible products and suppliers while keeping regulatory, provenance, and commercial evidence together.

    Accountable owner
    Buyer sourcing
    Collaborators
    Haven data · Supplier · Compliance

    Core work

    • Search and filter the marketplace
    • Review regulatory and clinical context
    • Compare supplier risk and availability
    • Model indicative landed cost

    Entry

    A sourcing brief is ready for market discovery.

    Controlled output

    A defensible shortlist of products and supplier listings.

    Release gate

    Every shortlisted option has traceable source, freshness, and verification status.

    Finished TRL 8 capability

    Validated supplier feeds, live regulatory refresh, comparison scoring, and configurable sourcing policies.

  4. 04

    Source

    RFQ assembly and landed-cost baseline

    Operational now

    Turn the shortlist into a controlled, multi-item request with immutable commercial and compliance snapshots.

    Accountable owner
    Buyer sourcing
    Collaborators
    Haven operations · Finance

    Core work

    • Set quantities and delivery requirements
    • Capture buyer/import identifiers
    • Snapshot pricing and supplier evidence
    • Generate indicative freight and landed cost

    Entry

    The buyer selects one or more eligible listings.

    Controlled output

    Submitted RFQ dossier and assigned review task.

    Release gate

    Required fields, listing integrity, and buyer authority checks pass before submission.

    Finished TRL 8 capability

    Versioned RFQs, competitive quote rounds, policy-based approvals, and ERP purchase-request synchronisation.

  5. 05

    Assure

    Compliance, quality, and commercial review

    Operational now

    Test the proposed transaction against product, supplier, buyer, import, quality, and economic requirements.

    Accountable owner
    Haven compliance
    Collaborators
    Buyer · Supplier · Legal · Finance

    Core work

    • Validate regulatory pathway and licences
    • Review supplier quality evidence
    • Resolve missing information
    • Record review rationale and conflicts

    Entry

    A complete RFQ dossier is submitted.

    Controlled output

    Approved, rejected, or information-required decision with evidence and audit history.

    Release gate

    No approval until mandatory evidence and independent review requirements are satisfied.

    Finished TRL 8 capability

    Rules engine, four-eyes approval, jurisdiction packs, SLA timers, and controlled exception/waiver workflow.

  6. 06

    Commit

    Award, contracting, and deposit

    Partially operational

    Convert an approved sourcing decision into signed obligations and a controlled payment commitment.

    Accountable owner
    Haven commercial operations
    Collaborators
    Buyer · Supplier · Legal · Finance

    Core work

    • Confirm award and commercial terms
    • Generate and sign required agreements
    • Approve deposit amount
    • Record payment through an idempotent provider event

    Entry

    Compliance and commercial approval gates are clear.

    Controlled output

    Funded, contracted order released to the selected supplier or suppliers.

    Release gate

    Signed required contracts and verified payment precede fulfillment release.

    Finished TRL 8 capability

    E-signature, purchase orders, escrow or milestone payments, tax handling, reconciliation, refunds, and supplier payouts.

  7. 07

    Fulfill

    Supplier confirmation and fulfillment

    Partially operational

    Confirm capacity, allocate inventory, manufacture or pick the order, and keep readiness evidence current.

    Accountable owner
    Supplier
    Collaborators
    Haven operations · Buyer

    Core work

    • Accept or decline the award
    • Confirm quantity and production window
    • Allocate lot or batch
    • Report exceptions and revised readiness

    Entry

    Contracts and the required financial commitment are recorded.

    Controlled output

    Supplier-confirmed order with batch identity and a committed ready date.

    Release gate

    Only verified suppliers with active evidence may confirm fulfillment.

    Finished TRL 8 capability

    Per-supplier fulfillment workspaces, capacity commitments, batch genealogy, SLA alerts, substitutions, and split awards.

  8. 08

    Fulfill

    Pre-shipment quality and release

    Partially operational

    Prove that the actual lot, packaging, labels, documents, and transport plan satisfy the approved transaction.

    Accountable owner
    Quality and compliance
    Collaborators
    Supplier · Haven logistics · Buyer

    Core work

    • Review batch COA or conformance
    • Validate labels, shelf life, and sterile evidence
    • Approve packing and temperature controls
    • Assemble export and import document set

    Entry

    The supplier identifies the shipment lot or batch.

    Controlled output

    Released shipment with a complete, version-locked pre-shipment dossier.

    Release gate

    Shipment remains blocked until all mandatory lot and lane evidence is approved.

    Finished TRL 8 capability

    Lot-specific document upload, digital signatures, expiry rules, release certificates, and deviation/CAPA workflows.

  9. 09

    Move

    Logistics, export, and customs execution

    TRL 8 build-out

    Book, monitor, and clear the approved shipment while preserving chain of custody and condition evidence.

    Accountable owner
    Logistics partner
    Collaborators
    Supplier · Haven · Customs broker · Buyer

    Core work

    • Book carrier and insurance
    • File export and import documents
    • Track custody and environmental telemetry
    • Manage customs holds, delays, and excursions

    Entry

    Quality release and shipping authorisation are recorded.

    Controlled output

    Cleared shipment delivered to the authorised receiving location.

    Release gate

    The booked lane, consignee, insurance, and customs file match the approved dossier.

    Finished TRL 8 capability

    Carrier, broker, and IoT integrations; ETA events; cold-chain telemetry; exception playbooks; and immutable custody history.

  10. 10

    Receive

    Receipt, inspection, and discrepancy resolution

    TRL 8 build-out

    Confirm what arrived, its condition, and whether quantity, identity, and documentation match the order.

    Accountable owner
    Buyer receiving
    Collaborators
    Quality · Haven · Supplier · Finance

    Core work

    • Record proof of delivery
    • Inspect quantity, packaging, and condition
    • Quarantine exceptions
    • Resolve shortages, damage, or temperature excursions

    Entry

    The carrier records delivery at the authorised facility.

    Controlled output

    Accepted receipt or a governed discrepancy case with resolution ownership.

    Release gate

    Financial and dossier closeout wait for accepted receipt or an approved exception resolution.

    Finished TRL 8 capability

    Mobile receiving, barcode/UDI capture, photo evidence, quarantine, claims, returns, credits, and ERP goods-receipt integration.

  11. 11

    Close

    Financial, dossier, and record closeout

    Partially operational

    Reconcile the transaction, release final controlled records, and apply the retention schedule.

    Accountable owner
    Haven finance and records
    Collaborators
    Buyer · Supplier · Compliance

    Core work

    • Reconcile final charges and payments
    • Release receipt, contracts, and dossier
    • Settle supplier obligations
    • Lock retention and access policy

    Entry

    Receipt is accepted and all material exceptions are resolved.

    Controlled output

    Completed order with a complete audit-ready record package.

    Release gate

    No closeout while money, documents, delivery, or exceptions remain unreconciled.

    Finished TRL 8 capability

    Three-way match, credit/refund workflow, supplier settlement, immutable retention, and finance-system export.

  12. 12

    Improve

    Post-market oversight and continuous improvement

    Partially operational

    Use operational evidence to manage safety, supplier performance, incidents, data quality, and future sourcing decisions.

    Accountable owner
    Haven governance
    Collaborators
    Buyer · Supplier · Quality · Security · Data operations

    Core work

    • Monitor recalls and safety signals
    • Score supplier and lane performance
    • Manage complaints, CAPA, and incidents
    • Review controls, data freshness, and audit trends

    Entry

    An order closes or a safety, quality, privacy, or security signal is raised.

    Controlled output

    Corrective actions, updated risk scores, and improved sourcing policy.

    Release gate

    Material signals remain owned and time-bound until independently verified closed.

    Finished TRL 8 capability

    Recall matching, complaint and CAPA modules, supplier scorecards, continuous control monitoring, and regulator-ready reporting.

Control architecture

Four gates prevent operational convenience from outrunning evidence.

Gate 01

Network gate

Before: Restricted access

Verified identity, organisation, role, licences, sanctions screening, and approval history.

Gate 02

Transaction gate

Before: Award and deposit

Product pathway, supplier quality, buyer authority, landed economics, independent review, and signed terms.

Gate 03

Shipment gate

Before: Carrier handoff

Lot release, labels, shelf life, packing, insurance, export/import documents, and approved lane.

Gate 04

Closeout gate

Before: Final record closure

Accepted receipt, resolved deviations, reconciled money, complete dossier, retention policy, and owner sign-off.

Finished-state definition

What TRL 8 means for Haven.

TRL 8 is not a visual milestone. It means the complete system is qualified in its intended environment, with evidence that product, people, controls, integrations, and recovery procedures work together repeatedly.

01

Product and workflow

Every material handoff is executable in the website, role-scoped, state-controlled, time-bound, and recoverable after failure.

Release evidence: Browser-level buyer, supplier, reviewer, finance, logistics, receiving, and closeout tests pass against staging.

02

Regulatory and quality

Jurisdiction-specific controls, source freshness, lot evidence, deviations, complaints, and CAPA are governed records rather than free text.

Release evidence: Legal and quality approval, independent process validation, supplier audits, and sampled dossier traceability.

03

Security and privacy

Phishing-resistant privileged authentication, least privilege, tenant isolation, encryption, retention, incident response, and tested recovery.

Release evidence: Independent assessment, penetration test, restore exercise, access review, audit review, and closed high-severity findings.

04

Operations and resilience

Monitored service levels, owned queues, escalation rules, reconciliation, support, business continuity, and provider failure playbooks.

Release evidence: Production-like load test, alert drills, RPO/RTO proof, webhook replay, payment reconciliation, and 90 days of controlled beta operations.

05

Data and integrations

Source contracts, lineage, validation, freshness, confidence, change history, and safe interfaces to ERP, carriers, brokers, and payment systems.

Release evidence: Data-quality SLOs, connector monitoring, integration contract tests, lineage sampling, and documented manual fallback.

Ready to work through the process?

Qualified participants receive a role-specific workflow inside the restricted portal.