Pay the right supplier,
once, within the rules.
Spotlight is the controlled entry point for every supplier relationship. Its onboarding agent collects documents through a supplier portal, screens sanctions, verifies tax IDs and bank accounts, catches duplicates and builds one approval package. Nothing reaches your ERP until a person approves it.
Every bad vendor record
becomes a payment problem later.
Duplicate vendors get paid twice. Unverified bank details send money to fraudsters. An unscreened supplier puts you on the wrong side of OFAC, and a missing TIN turns into a 1099 penalty. Spotlight cleans the vendor master once, then keeps intake clean, so the problem never gets in.
Stop paying twice
Duplicates are caught at intake, matched on name, tax ID and bank details. Spotlight also finds the ones already in your vendor list.
apexanalytix, clean vendor master white paper, 2020 ↗Suppliers working sooner, with less AP time
Suppliers self-serve through the portal. The agent runs the checks, routes the approval and writes the record to your ERP.
Graphite Connect, 2026 Supplier Data Benchmark ↗ SDCExec, May 2026 ↗Capture acquisition synergies
Each acquired company's vendor master is scanned for duplicates and merged into one clean list across subsidiaries.
McKinsey, procurement-driven synergies in mergers ↗Spotlight — every supplier verified before it is paid, every record clean when it lands in your ERP.
Compliance checks always run.
The rest follows your policy.
A payment to a sanctioned party is a violation whether it's $800 or $800,000. So the compliance checks run on every supplier, and you set the rest: how much paperwork, and who signs off.
Universal. No exceptions.
Run for every supplier, whatever the spend, category or configuration. No setting turns them off.
- Sanctions screening against OFAC, EU and UN lists
- Beneficial ownership declaration, every owner screened
- Tax ID validation
- Banking detail verification
- Duplicate supplier check
Configured to your policy.
Calibrated per spend category and tenant, to fit the relationship and your own rules.
- How many trade references to ask for
- Which quality certifications apply
- Whether a master supply agreement must be in place
- Who approves, in what order, above which spend
- Reminder cadence and SLAs
- Code of conduct and diversity requirements
Request to active supplier.
One controlled path.
Every supplier starts the same way: someone on the procurement team creates an intake. The agent runs the process from there, and stops wherever a person has to decide.
-
01Procurement
Create intake
Supplier name, estimated annual spend, spend category and the relationship owner. Every supplier enters here.
Pipeline dashboard → -
02Procurement
Pre-qualification check
Country eligibility, required certifications, diversity and conflict of interest, answered in seconds and before the supplier is invited.
Pre-qualification →PassSupplier is invitedConditionalHeld until clarifiedFailIntake closed, reason logged -
03Spotlight agent
Portal invitation sent
A secure, tokenised link to a form built for the spend category. Reminders go out at 3, 7 and 14 days.
Supplier portal → -
04Supplier
Submit form and documents
Tax forms, registration, beneficial owners, bank details, certificates and code of conduct, with a live view of what's still outstanding.
Documents → -
05Spotlight agent
Automated verification
SanctionsTax IDBankingDuplicatesDocumentsEvery check runs before anyone reviews the record. Any sanctions match, on the supplier or any of its owners, is a critical hold.
Verification → -
06Spotlight agent · Decision
High or Critical risk?
The risk score, its band and the factors behind it decide whether compliance has to look first.
Low / MediumStraight to the approval packageHigh / Critical Compliance officer Reviews the compliance holdResolved → approval package Rejected → intake closed -
07Spotlight agent
Assemble approval package
Documents, every check result, the risk score and an exact preview of what will be written to your ERP.
Approval package → -
08Procurement · your approval chain
Review approval package
The approvers your policy names decide. At least one human approval is always required.
Approval policy →ApproveRecord is writtenRequest changesAgent tells the supplier exactly what's needed, back to step 04RejectIntake closed, reason logged -
09Spotlight agent
Write to your ERP (if connected)
All fields in one transaction. If the write fails, the approval is held and the error shown; nothing is half-written.
ERP write →No ERP connectedSupplier activates in Spotlight only -
✓Active
Supplier active in Spotlight
Monitoring starts and the supplier gets a welcome.
After activation →Welcome email Your words, your contactsData Quality Agent Record monitoringCompliance Agent Certificate expiry
Every step, built in. From the vendor list you already have to every new supplier.
The import, the checks, the paperwork, the approvals and the ERP write, in one workflow. Every step is logged with who, when and why.
Vendor import
Bring in the suppliers you already have, in bulk, from CSV files or straight from your ERP. Every record is scored, so you see what needs fixing before it turns into a payment problem.
Pre-qualification
The first thing on the intake screen, before the supplier is invited. Disqualifying conditions are caught in seconds, not after the supplier has filled in the whole form.
Supplier portal
The supplier gets a secure link to a form built for their spend category, and a live view of where their onboarding stands. No more sending documents and hearing nothing.
Documents
Collected once, linked to the supplier record, and checked for completeness and expiry. Compliance documents can't be made optional.
Verification
When the supplier submits, every check runs before anyone reviews the record. There are no exemptions by spend or category.
Approval policy
Spotlight doesn't decide who approves what. It enforces the approval chain you configure, per spend category and per risk band.
Approval package
One package with everything the approver needs, and the ERP consequence spelled out on the button.
ERP write
On approval, the verified record is written to your ERP in a single transaction. If the write fails, the approval is held and the error shown to the team.
After activation
Activation isn't the end of the record's life. Two agents take over monitoring, and the supplier gets a welcome in your words.
Pipeline dashboard
Every intake, at every stage, in one view, with the ones that have stalled at the top.
The agents do the legwork.
People make the calls.
Spotlight automates the chasing, checking and assembling. Every decision that carries risk waits for a named person, and is logged with who, when and why.
- Sends the secure portal invitation
- Chases missing documents at 3, 7 and 14 days; flags stalled intakes at 21 days
- Runs every verification check: sanctions, tax ID, bank details, duplicates and documents
- Screens every declared owner, not just the company
- Assembles the approval package with an ERP write preview
- Writes the approved record to your ERP in one transaction
- Hands off to monitoring and sends your welcome email
- Completes pre-qualification and declares any conflict of interest
- Dismisses a high-risk country warning, with a logged reason
- Resolves every sanctions or compliance hold
- Approves, requests changes or rejects: at least one approval, always
- Reinstates a failed intake, with a logged reason
- Accepts or reverts edits made directly in the ERP
Connect once.
Clean what you have.
Keep it clean.
Every intake is durable: if a system restarts, it picks up where it left off, and approvals are never lost. Every check, approval and change is recorded with who, when and why.
Connect your ERP
Spotlight connects to your ERP under a role you choose. NetSuite is supported today; if your pilot runs SAP or another ERP, we build the connection. Not ready to connect? Spotlight runs on its own as your supplier record system.
Import and clean your vendor master
Bring in your existing suppliers in bulk, from a CSV file or straight from your ERP. The Data Quality Agent scores every record and surfaces duplicates, gaps and inconsistencies for your team to fix.
Run every new supplier through intake
From then on, new suppliers enter through one controlled path: pre-qualified, verified and approved before they reach your ERP or can be paid.
Built for finance and procurement teams at mid-market companies.
Cash protected from fraud and double payment.
With controls your auditors can test.
Suppliers ready in your ERP in days.
Without chasing W-9s, keying records or fixing 1099s in January.
Suppliers working sooner.
And one clean, verified record for every supplier.
Every add-on's vendor master, merged early.
Screened and verified early in the integration, so procurement synergies can be measured.
Software built with people who've run procurement and finance
Zomnov's founders come from AI and enterprise software. Our advisory board comes from the other side of the table: they have run procurement and the controller's office, and lived with what bad vendor data does to payments, audits and supplier relationships.
Together we kept seeing the same thing: supplier records that no single team owned, bank details nobody had verified, and sanctions screening done once, if at all. The tools on offer were either enterprise suites that took months to implement, or forms that moved the paperwork around without checking any of it.
Spotlight puts one controlled entry point in front of your ERP. Agents do the collecting, checking and chasing. People make every decision that carries risk.
Founders
Advisory board
Marcus Folino
Advisor · Procurement
Chief procurement officer and strategic supply chain executive, with a career spent leading procurement transformations. Board member.
LinkedIn profile of Marcus Folino (opens in a new tab)Summer Wentworth
Advisor · Finance and accounting
Career controller and accounting leader who runs finance teams in close partnership with operations.
LinkedIn profile of Summer Wentworth (opens in a new tab)