Privacy, Data Handling & Security Policy
We understand that supplier quotations, tax certificates, and invoices contain sensitive business intelligence. Here is an unvarnished explanation of how your data is handled, masked, and secured.
Last updated: September 2026 · Operates under parent brand SochYeah
Bank Account Masking
Bank account numbers are permanently masked (e.g. XXXX XXXX 4821) in reports, storage, and UI views.
Zero Third-Party Sharing
Your uploaded documents are never sold, rented, or shared with commercial directories, advertisers, or third parties.
Encrypted Processing
All document uploads and API communications are encrypted in transit via TLS 1.3 and processed in isolated memory containers.
1. What Documents and Information We Collect
When you use SupplierCheck, you provide:
- Account Details: Your verified email address or phone number required for authentication and quota management.
- Supplier Information: Supplier company name, claimed GSTIN, address, website, contact details, and optional user notes.
- Uploaded Verification Files: Commercial quotations, Form GST REG-06 certificates, purchase orders, vendor invoices, bank account letters, or company profiles.
2. Document Storage & Retention Policy
SupplierCheck processes documents to extract text, tables, and tax identifiers for multi-document discrepancy analysis.
Raw uploaded binary document files are held only for the duration required to complete the cross-examination analysis and generate your report. Saved report summaries are retained in your account dashboard for your historical reference [TODO: confirm retention period with founder]. You can delete your reports and account data at any time from your dashboard.
3. Sensitive Financial Data Masking
To prevent accidental exposure of vendor banking information:
- Any detected bank account numbers are automatically masked so only the last 4 digits are visible (e.g.
XXXX XXXX 4821). - Full account numbers are neither rendered in the browser UI nor written to customer-facing PDF exports.
- IFSC codes and bank branch names are displayed solely to assist you in confirming beneficiary alignment.
4. Legal & Financial Advisory Disclaimer
Non-Certified AI Analysis
SupplierCheck provides preliminary automated discrepancy analysis and heuristic risk scoring to support your internal procurement reviews. SupplierCheck does not provide certified legal, forensic, or financial audit opinions. All findings, recommendations, and question checklists must be verified directly with authorized vendor representatives before executing financial transactions.
5. Third-Party Data Sources & Verification
Tax identifier and GST structure evaluations are performed against publicly documented syntax rules and authoritative GST registry records. Any external data queried is labeled with its respective verification source (e.g. gst.gov.in), and is never represented as a substitute for an official government tax assessment order.
Have questions regarding security or compliance?
One Studio. Connected Intelligent Capabilities.
Compare supplier quotations with BuyYeah, verify vendor authenticity with SupplierCheck, or explore government business subsidies with Seva.
SochYeah Engineering
Production AI agents, custom software architectures, and automated growth engines for founders and enterprises.
BuyYeah AI
Compare supplier quotes, uncover hidden freight and installation costs, spot specification mismatches, and buy smarter.
SupplierCheck AI
Pre-payment vendor due diligence utility. Cross-checks quotations, GSTINs, invoices, and bank accounts to catch discrepancies before you pay.
Seva Schemes Directory
The definitive independent guide to Indian central & state government welfare schemes, MSME subsidies, and financial grants.