PIE360 is deployed inside your Microsoft 365 tenant, not as an external SaaS. All procurement data —
vendor replies, quotes, RFQ records, and audit logs — reside in your SharePoint.
PIE360 never copies, mirrors, or stores your data in any external database. Your IT and compliance
team retains full control at every layer.
- All vendor data, quotes, and RFQ records stored in your SharePoint — not in any PIE360 database
- Backend uses Sites.Selected permission — scoped only to the one PIE360 site, not your whole tenant
- No data copied, mirrored, or accessible by PIE360 outside your tenant boundary
- Azure region matches your M365 tenant region automatically
- Entra ID SSO — no separate PIE360 credentials; users authenticate via your existing identity provider
- Inherits your tenant's Conditional Access policies and MFA requirements automatically
- All secrets and API keys in Azure Key Vault, accessed via Managed Identity — never committed to code
- RBAC: Admin, Manager, and Viewer roles enforced on every broadcast, award, and audit view action
- Microsoft Purview DLP policies apply automatically to all PIE360 data in SharePoint
- Data retention, eDiscovery, and legal-hold policies set by your IT apply with no extra configuration
- Tenant data-residency requirements honored end-to-end
- Microsoft's compliance certifications — ISO 27001, SOC 2, GDPR — cover the entire data layer
- Immutable audit trail (PIE360_AuditLog): every action recorded append-only — actor, timestamp, before/after state
- Automated data retention & archival: closed RFQs archived to long-term storage; retention docs per record
- Encryption at rest (AES-256) and in transit (TLS 1.2+) via Azure and SharePoint platform defaults
- Human approval required before any award or counter-offer is dispatched to a vendor
- No cross-tenant data in prompts — each AI request is scoped strictly to your own quotes and vendors; no competitor data ever enters a prompt
- Token circuit breaker — maximum token limits enforced per AI request to prevent prompt injection or runaway completions
- Human-in-the-loop — AI agents draft counter-offers, follow-ups, and comparisons; all consequential actions require explicit human approval before execution
- Azure OpenAI Service — models run on Microsoft's enterprise endpoints in your Azure region, not shared consumer services
Microsoft compliance coverage inherited automatically
Because PIE360 runs inside your M365 tenant on SharePoint and Azure, your organization's existing Microsoft compliance certifications — including ISO/IEC 27001, SOC 1 & 2, GDPR, FedRAMP (where applicable), and regional data-residency guarantees — apply to PIE360 data at no additional configuration cost. PIE360 does not require its own compliance audit for the data layer.